Function at 0x403270
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413220
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x4630a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
push str.START
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov ecx, dword [ebp - 0x18]
call fcn.00402bc0
cmp dword [0x465210], 0
je 0x40337d
push str.LEIDO
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x465210]
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.00402d30
mov byte [ebp - 0x11], al
movzx edx, byte [ebp - 0x11]
test edx, edx
je 0x403360
push str.SUMBITINMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], str.anopcy2ClBMAxjevxvRp340GFyjYB5wdrsAYEHTHsIJWerI2EQ8NgGp52VXmfUoxI2yVbr6LkTuWQSFLBtAKpWD9uIzii4ibmeMYpiXYGfpFC0XCSkMvF2vpGzl5gpndxisqwDlMBt2aOCuiRv2QL0lIBME6G9HqgEq1kLsTvW6yNV3gGdj41PQ9yk7GgWlslPj4aO4g6IyX2vqImOhWkpf3dLvdFOhDtwooYSk9rpyu0jjFIOmObtb3vkQ3Kbt57wDjhSQ1UlrikHqRoRCwBFJ2JSlDoONHBPLFaGKFfqMwFrmQSJRpgxu8yUomxX995waPi1w8sfmnMFISvlAlmvrMUCCEgcjOwRVFVuaGU262wU22nM0IES3F5JO0Ds4UJfRzUB8UlDbGL6N7tf0pyTeJFJ2OUa6okatrCNhDJyXAxxrHA5cQYCmcCEsCk36XLiYI3lYXtV3WRUm9lKTXs3fvddxTgfG7msijKp1fdxb3TnTzcU7c55aq1KS98kq5cB1HS6E6YNm8SloRqlzvxsPYXhlUsdQRfNtP9nAq6MLu7K3E7UHn6RsqkqWJOdsifjHdQ5XofcLqWO6meIBMAPFiFsUaT4EROtoORXpqpmYgQeGawT7fpPwqShHLqPPUnN0bEGYcThbkn1X0APKNyaAQesWaf2mvcXEkeJbEoylX6DWAOXMXB5PWgcvUeyuulKbNcy03QsGxKUHpvT6NHFJiSipGnEvsI58FLsQQzUCr53bFGqnSAXaKigV6K1zN62IvGDCNdsJ3VFipioVhxPuu3dvMtGRE1OUqibBVHgQLeLWn2RPCs5vR1RNqL7uUSNm0x5CwnbW30KX8u0N0MmtAqFFIU7ugUsonScS8OEgjio7X28j4Ah7yNDcmiWT8br4cri6yYNd1hQaVSHvWsgz0YrD2mdFHxx9BP1nS9nqDcHMS6jgkBEulbpsvDUIXID6hkVlsUKGFnTDqwH6oMIUkTulvItUDfN4pHs1TdY4CcMjTSJkNnzoX0jaNiF6etfVHnVU4iIKY86lrHrSNhfRuD50a8F20Cigmiy07LidkIXgXkYr61DNrkH8o34rYGrj81rFsxD4aCTv8WEoWFx5BTH4h0N2Wwh5hFzMKQl96vOvlATN6TF13uesFWfquOAewWRDWgEvGc0BO5irOWBp6B5fpX8eU5h9c952gGsnyw98v5zNTDNuj3ItkeAWkCnU46Sa8lfdhqkl87z5EnDYzYeuiX98zB5jsgQGkNaFvW2tbtk9U8m0XQjLesIbh3GQbDpLPW3BSb6IUlWBYr8bUsm107CwPJFHBPUXUXi34hMamGJJJsXy4Vm9xowvolELy1Bj7q0iJwIUik7yxSNDiKYhMOysRkmFrUzhebSMzdX2hSEKg1soPEvHG39CWYGG9TRPjridiNVsBP4JjIDf6MPXcKdd6sEP4PmlHHfpCJq9otaCBqV2NzzMiIXowHrN7dRE1QmsiAD1tVXdzaQ6VMU40N5jcvk3J74443UE32cTt9B29xKdJvIWiVB1SuMDTbxl2OQsFK4ALSkhMJUBIbsKe7Wx64pq4AIFgYIyWzCRuMxSuuvWExh2OrWR6xTUdb1IrIIQFnDpygOtJaznAFXva6NWW0alPjCzuvHpF6hSFAPmwE4tOYT7ij8DrnaCXVIPzb9wLM4UfQpAorNiVd91loTNbp6o7AjubTaGNxW4uXxTnCvjKqpxnLwetGfYmnj117xBEyhQpFkH2PNtn02fwUKEsD1reXyk5DFcb8KJHz1aqjbccFXRWoLM0t0vNEIOACAwiytbU3169O4kPuPoLO7hIiUCHhpj6v0VUjXwikQ4hMH9bOTWbUJI2YCV2e65n7eTVR68Rubksajrqm4Vlu0G8f5hoxaQswfakOagtpQOOsVpXaQRtoAHTEtdVMQPGdDD2PQaENNb0PwIxAryMADd6A31k6lFCVFq1Cc2Je8NaWVu5iFVu5FD9fdCIeEq7NeRi1F1P35J05UiPlYdQ1zliFyIOuJFgfQtPU6cOs1IH669h2tK8wDFxIKDPMppt2HYGhJDjusgYpYwb5U8AUxTE6Etsxo5meAkSadmH05u330mzsE8xumf9ke0VPiAQhXDsHwhaFFjEzr3IvIJhGySlJAF2iBj6TVgt66lC2bi4aupdSNa90YYhw2FY7I3zbdI2DIoLpFH4ygJRzaLs1RBLGUTB4T4WvbMeFzg4XnxT4GMKSLbAlRNr4OUavk5dCRoaEfHIIEtpAEJesdaSK0ACio2uo4hAzTGX6HsKt1UUBVfUhIKL2FSsTtdTe3hAJB1MAjbST6Veb8pHD88C5GBOb2bf699YQTWNPOwFtGlJWOLK9YIQQfCnhajSH3rNUmgaym4nvHCg6onrMo8UoVIwb7HGgq7lldS4Buk48e0eqcEuObbfPJFtFhb4BJCaNj0IS6NxjrlviqwPRJRjm2bapbdS9qR7k9YlnwVoQHiwEbmGQbqAfxVjOs3BRMaggSob9s7Ynv9c3rYv4biAQrypdXA9lXlYih1ul0HqktU0x7F4564NBhAGGCqXG5CTrKOxcC0AYnkQPV9mPVBL1XBbdwU1D4IU1n0B0ee7r7NgaAzFAjV3HO3DwS3OuNNbIQVY74DrFJrdoCBwSvhaizmDf6zk72s8wwd12MnIor6dVtkJFq6HyjWsMFT6WnLqJmC1gryTeyihKtgoaC1gjx8dqfa83ng331bkpueGAzfXrQqOUjSrs8dHdBd01rRcoI3jcJqzI4Uj8IfBPiLRXnqz6HyJ2S2n6oDmmp8NGOUSy6DE94TbTUYaNBtWQUClNzzRL7flpHCM2QV4oKJ1pO3DSwRIPCY6stDelQF0BL3ApLWgr6W3HxHSKOqETYSUmSRS42eiQbWscyVSvuoX4S1ACXsRyRyn8jrh3qHwwgMYnLCT7Y7tR80ayC32Q2GgHONQrbQMQtIkBQ9t8fphyQCPqyVgs9qGmcy5tTlSQoAa4996
mov eax, dword [0x465228]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x403346
push str.NORUN
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov dword [ebp - 0x2c], str.mjtV3vzGlTyqYqGEIbnhGpWnIffDNcX12hIm0C9VYrx8T0WSxWEiFfnQ79J3zqPifEVnb4r3YB0ouLjQcTEqSCzgBzftOXhgEdSmkY1sflGmrwwFe3rujONkHwAhbtra9Jt5ahlGp9V5TiF8nsdHSTbVDu8GLSOOO5DHlDFrL2Fuqp9DyccEuFC5ltOQ9neHX2rLtu5ynxmr4rGfVnIlWHTVr1cNlpPX4tWd93v0WG5EkcnCP5c96kzKhblrNH7mOgomQjGRW2vI9NA9Pq5QDF41SvYBtfQh9g2W4YcqvDPbUD3LFzWCiABg05mXIicM8nc4eAs4r6RoujN7iFr1IJhe3uk9nmBy5vkeIpFkkw1FcIerQRgXvvXJeRiAHdSVwAVkRsVSowdaK42CJmcNe5pOlNgHsU8R9zADWy6yAe0XpKfevl8hon9AWtNIOMNXToWPdgThAiv2NufqU20vs7ykkv6OqpGuR2KYPUSaKRqc3eG1VEPYQJRrq5R1oBQjouNxYBpr7E1dKcBuKtKBVv5vTSphevLY0K2lKdHusO9GTTlVJIVF3o5d88CoXuaEpQnDbmKQe6ebY6z5sHCRrazpaw073b8ayOT2hrs9CHi4WNjkIGafnn43Njx2nv7VzHIy0CtcvnTE9jQFv1Yi2iThueTDkCO4Oy4BgPkWsod9rbTOYXzQw0glpyhjGYljNud0UKmsKv0C6fp2zUv9WiaEt4smJi41iAvUMRJYm1y3SzGgRdqPnMpJe3MVcwIdeWpUEnsQ0INjYwp7De5VLPHiYkc5fSoyLIp0egkz1Vb82IvNVkhR6yv9HeeLuUqkg39ucj3OxvLb93jcUVRqgP9f8AWP2nxuf5hba23kmMdYSFqM1tRN7lKGBM31ohNAv0xcKHF4WDGXgXOJPmhAsukKhFKUxVyR0YM3so35xr0sIELPc2eM3rENUEU5VTvaTgUGMT8z17wEbERu70VIDbmm3DVRs1F0y3UpbOJS02bE0c6NOGEbQpU6R1MBrnpuyzQU2vtwM9ws1KGsHDKjkBBOhL3tIlpqF6SkH4N7pUCUv4fOrlFEE2xuVkPwvxFfSSd6toYpzhcQb9GSPkT7lGEb7ESKwQwYme98B79kGJsReghgU823SmJ7Rfu0UsElvq4FjDcUTfgyhYAeVkK9HAnGT6v1iL2GTMpoJaVn1l2lq5xIjtMwbG0nEIqrJs0YlEKk1DU1A2KycDlgHaXEFIRRf9fMKvcROmFUdKAkPSYrA1A4X1drty4VwVAuj8BAwiR0kXbUGUS54M8X8Ds9OLtw19CRONw4RN6MlyMwMHavuPersFNsTKSFXl96ahAPsjfScwh4umaBghqApLnoSEODkCtiGAL55ccjKBqzOsIa8xzbCBnqSmHKJBxp90lDKUXrRnKcx8kQohTBXQ6oWxKvxpQlN5WYHSE4i7Fh610eKqUUwdVv6D1xNFsPjCwdlAomMTofEfnMmavLyojohQmDgy3yPHk4htrR3yXI3tDPQYPvw8K3p9wIpJP2XHYWl26zHHgrRUyDizr56bSTof1OmoDIKcpSzMLNmGXhmfukdXa5ainI1Fea2eQVG5RxafVhyDCeuFnTypbKOf0G5Fk4WsqSJuWezV7aOtzuVUGiNqXYjPznkhl2pOUGhPzUrpXVBP1l4fyhMNoiaS1Koh8EozskdNYbAfbwj9XdWoBzSBzQ2bmaXfmHytJHOiJg41yeiCgHoD6LR92sPADmBux6iN3ASyJ28jVISczxQMQjY1yxEX1sR80QFmfEC2e0cLh6lCnyw7gzT5idNbI0gYTbvrLtHtKjVYAOUn2MisiNOqJbK74ScHfnhUCsfScNdDXJKHFlLawaitENgFrr7GPTb5pYPvLR4mB7YCixd34GpRb7bLilm3ko5OigvU2BKQJAIWGMEwDiFvLJFlcGeKczDv2rJROIKLHdXduDMqwO1zdX0lJW0rIk62VutrlAIRTmHJcO0cAVSwCJJIC0SB4GvNVm6Y9cxOPTUC4bqIig85qCytD62qaNxIvNs53bgo40tGfGQrDi5coOpBDSBUO1DgHxQzgOblegdyGuNifov9Cbq6yoDODKUla71Cg3Lq3FWC9PuKhQDpwcU0o5bC3Abr71bAUqHqkCr2f9QMvOaMR0qlgKcCmhWylAY9n8SaWQnGqXvSflciJnGbiCDRDGsaf5ye93nqSxrgVYK3rmkgvIDCKinbNOCjKDq02Cu58dfdS3EOyJBfW5rIYKg7EO6vohDVcYIVOPkJa6VeE9w67bqAlo60I0cNhUDK7UJS9IeOxh1Pqf1Tok8mlXBYsLWK7nnqAOuMnArcAO3G3wu3vwk9xFvU5I8r9ldeKI2yQxlmI8SomnM9ulX8z3rqFy9teqXE4kH506mB9J33I5e8J5dt831V78bWM6VulX0ik9NWWkNh6Py8WCpl10MB9s3uMIQNEzE9pWWd0G5c3G0Bav8W8ChniDjeQzTTuNyAUd3W1MytEAdfIU9vn3WWXXfP6MHlCRPAzXjuxJAfDpj0kEqeNMeMmRNuiqo08FO9dGQWXLedgSS70c9owJs7vTCRIpuXrK2gIdLcsffznDU45DGfHb0WhJ6ahA0DmhcV3L8P5G62qbUDfHC3CM62mfh7sEnDU2feh0ViFMXNoWNPtNJ7BE0UioWVhdxSzvkbwU9HUiIERdXW8W1K4fTRoiAomLOx3LKQ0TF1lbVO2cfxQNEgvoUYRdmJVI34pz6lXMmThwS4BXUrCF21vk94Hy9KKkv94g5JNK2PSxzIUuIJKuLmIICHKRyKcLSLKSF9Xmt3bAFyRDRLUPDEQzmgEOPxb6m9w40GWApwXbyTVa0a3XFhJjjQTe1rfgzNK7qxmOu0UWlAaIeMsI3EgJlnP5Lis7Bu9YvPRLn2vGNXcP5PLBbcm2muztusvoXgLd1LfACR3jsUfVAFVMGl7N8C6DhODGDoY4SviOLAFTvO5le1g2owB1rVeY
mov eax, 0x12c
jmp 0x4033c0
push 0x42b844
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov dword [ebp - 0x30], str.nRDpMRvhjdTycDxaMyuPn3UW4Fz1mH1g4s2JjXFu5wD9tfhQn0m4Nv3br8dCyOG0edfwwUmu6oWWfSVGBBUSQOCv7CO5VGNdb5Ix16ipOAHFYfOFvVNQgRUM3kbFQgXncJMF5oNfdc7El3mg5jtFp3MHDHplMvTmtCyUKdOUExGVd12egNecqgHRMrWDuompbY0uHtNdYdi6DRpNWhdp6WGKLyyMSVdbsKSEnCOOu55tUn7zYllqW4jKpfkD58nImJQSSAwjWhBWwiTwanpxc4M8T4HFq1StUpkK2R79ybE78qy3fx19LUQ3VKp2qCNe73A0lroGWrr9DyWSWIBMi7PyCnwuQ1jdSIJv3NJbg1qT8v3cVBra5EFAAdurCgF28eGf4X6K24rQS7RxMEB7a6Q0QR0XTtaFE9cp3s0sj4D8peyQ642AgrqvTa9I0JeviORgjkycxIuvoHhsoNrIQg3HGck5vbklLl6gT9tMD1NnJqi58BrJ2DX8Cme18U2kLA7Wy0YT0dIMyhYPJ0q4F8W9wfU7R8X0Ye14HrWbsOGq9bKdBfBdiQp4JNMERYPkYCFswCM4gCwC23673n4Raqi30avwtEsDlXN6QavVbFjlUPBNmcGPeY8avL9hgkGFAcYaebF4niwcHuWXMhb59a4mWj240ftw90ATUlqAu3Vpx0QFvX6Gg8KvrLRJEBQItQOJSOxzEMCUJk8nFkNUDzvlymGIpGUaUYHdMjiWnD3dNuGTogv84G9uizO9DJQ8Oo84Y1AwEWWuuwtvHnePXb7s9bUKU2VirPL6yDT1YnqxIrzNB4OIyhqF3c1T2RtK2Raigpg3ePSOCi5N4wYyFIEqoUrCXxUWKKDMB7i7Ku5rx9eV0DeiUKXUYTPAVoJJLynPIYeAoM4726iYg8S1yb6e9Xb6hJwn98pOwNNKpqgdOfC8Fr8WzgnkAdN6DXUtV2wjASpMvnoLQFFX0NXsEOH6xXl9NqE48DqYd2YKQSuqixWsWdd1dbygCRLvLvyzG4zDmz1z6rYuuY5Xfqvji9XuWNo2JCtNvdjhJmC7jNxS09HfsWm5I7Aj4TOe8bpVrIKXKJt612dbAeAqd54i0UC90B0eyBnzi1UYuAN9cpoCcpz22RKYkVRjdzfQOnvGQhyGLirMivK31Sy1p8pnA6F2AL9uWU0DNskC5MOod9kXpTxFLrPNpM0owpDf9J8cPhGsEsShhqsvWGzHwbCK6WmoPW0NRkfvyeUYngeCiHQspuNd1qeRE2RSMaOwIcN7xy99RDXvwBueLzsGx6WTPYbF621oxRiWkfi3szPTD2ITcfPYmNSL1izpXPQ4lSjko79Vbw8DP9d97MjoFYXwlWSC28TMoOvWaFj8IwHuGmWl4wlxENXlCsvMmI4t7eEV2gccy524hngsRMtvpdszqPsduFAGaHzLkW3JLd9V78N6wUiI0TRFVDi9rj3CmQ9lnyYzesDtbQxyciw1smrh8T9FCgj6MjnVoHTDsTH1S1MIkhUAJPh6CcLOXoBCFHibAMw0H77L6pb9ugj4Mkf4KCssNOthtF3b7TqRUccNa1F1vFDstA6cAM6pWWNPRTRl4Y2AIJT6Q7y9nUU8CboFRM8kEsNHG52vwHwFtSGypir2ksdT2pwO2fBLCh0T1STVutYKfgFTvkiKLJGTrjG4fl9d3Ae782WcUvgBL1tOijo4keAIxKV1mJV1wRIFtgGlKM79wQmOnAjnNqdjXj9qWALn7PYvKkHKP12qFV7nMM0GePX1kn1agBXtmuPfOYId0HoD3X9M2KIGQXkza35eh0tif6s7K1sU37o9gbqg3E3G6mO60fGOEuNKbbn1RcMqFi4pyitVhSUDAy77gC2cLk2E3vprClBHA1f3VzrMx8y7b9SwnB7OIgOHdaHzHhV6pPBP2L2HbjxoTGUCIoMhfzqtqsKd2QNmK6EEhavtWEKi0L57AVIgR2DrWYmOFTpD8SJzIyJK4BsnV3k4gXoFJXSWuBGrVkWq440Jah97cVbLk7EWXXatMc8iapcPlYKDYfrv68LYuBOh4CbCRd9Qy3VABNFlzMcBjOSkIsbJvUzlbf4l7Gl3ompRQrg0xFK1oWXNT9yzho11VDzKLdzwgwi5qeprnxWWxx9GhxFDiOX3Ov1RRlsORpQ2hlSVmmpT0iKQ8xOVtgEMsxP7pmtDCqXqOfOr35PH1ETltzUmf4BeKuukkoUQCt5QUDEv8H1EIPzi1wrHqPF1L4yHwfSqHYdPUv8lydMnhOv3aRtFko1pM3FOQzmvmTWIy5nOqC6UImn32wDPFT9mhbzF6J7lNHuM5SMp6XWH7WzRrYaDHJVpUg4D1SKlYlBcbG8f5hqzpToeVdPs3yvLA6YtkUG5ukA1Xxt78BIHyfV2HI2xOingoulmGxdeFEoa2Jepb32JqM8gHxH0B7npCh8OHbpBxRtuqQ9cnGJES6H5xboTovCiLjuNW3cdPYVHCJgb3BcPHxhLzGc8EbCIwrAEW7j91yprAt0FLWU2DcfMODMvk7b3NyH397lEbF7bIr3EhRrsoWQG26tJMypmGzc91zG9dTRlQhuJwtpCBsabEE3qP2MlumtpTJA9Cm3bjRFcGWwuT647OrX1Mk6iJR3K9F5jFFCUPojU6uBpO3ivo4eUlutc82vr2a5ujV7zEiqrmiv5SfouVFomJOlFANubMLiCcOD8pfoWczbEyoKkFUCwyUuWeaKYDPgNHuUrfeTgCyDBgWzqAYErVB1Un66lGtmgQDceIsXOMt0Rm9SnlwM3p1m8yBr64xLorqk8QqVK4CsHb0zQiMVaYwgJuIItOEyHVBKF7TtL3ffN1gkHwsxv6LPy8s16VdyRumtgsTzhwDJf4sDTLLFGEDt3ASs0norFYt4cfJAis8jtxSTzyvWd3lVhd4dz47K3YaIFkWat43umzBfX1Tyr3ih1x4BBR5N6Ne9LYlh8IHQ8erIv4JiGWdTBk00jzIM2nXGt
xor eax, eax
jmp 0x4033c0
push str.NOTSUMBITMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov eax, 0xc8
jmp 0x4033c0
push str.NOTREAD
mov ecx, dword [ebp - 0x18]
call fcn.00402a90
mov eax, 0x64
jmp 0x4033c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4