Function at 0x10026c03
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10085aef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x264
push esi
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x84], 0xa94b2ab7
mov dword [ebp - 0x118], 0x3659ea4d
mov dword [ebp - 0x19c], 0x36378284
mov dword [ebp - 0x38], 7
cmp dword [ebp - 0x38], 0
je 0x10026c8b
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10026c6d
push 0xaf3
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x10026c86
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x10026d9d
mov dword [ebp - 0x58], 0
jmp 0x10026c9b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10026cb1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x250], 7
jmp 0x10026c94
mov dword [ebp - 0x84], 0xe4b7
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x38], 0x24ce5545
jle 0x10026d59
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x38]
add eax, 0x62d7bc35
jne 0x10026cf9
cmp dword [ebp - 0x84], 0
jne 0x10026cf9
and dword [ebp - 0x10c], 0
jmp 0x10026d03
mov dword [ebp - 0x10c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x250]
add eax, dword [ebp - 0x10c]
jne 0x10026d21
mov eax, 0x128f
test eax, eax
je 0x10026d3d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
je 0x10026d3d
mov dword [ebp - 0x184], 1
jmp 0x10026d44
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0xaee5
jle 0x10026d59
and dword [ebp - 0x90], 0
jmp 0x10026d63
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jbe 0x10026d8a
cmp dword [ebp - 0x38], 0
je 0x10026d8a
mov dword [ebp - 0x98], 1
jmp 0x10026d91
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x19c], eax
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10027578
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x2c], 0x14b58e17
push 2
lea ecx, [ebp - 0x1e8]
call fcn.10017f3e
and dword [ebp - 4], 0
mov dword [ebp - 0x78], 0xaf9031ea
mov dword [ebp - 0x14], 0
jmp 0x10026de2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10026df5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0x7a1245c8
jmp 0x10026ddb
mov dword [ebp - 0x14], 0
jmp 0x10026e05
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10026e21
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1e8]
call fcn.10017fdc
mov dword [eax], 0xaae07ea4
jmp 0x10026dfe
mov dword [ebp - 0x14], 0
jmp 0x10026e31
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10026e47
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x204], 0xf4a1d2da
jmp 0x10026e2a
mov dword [ebp - 0x14], 0
jmp 0x10026e57
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10026e6d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x210], 1
jmp 0x10026e50
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x10026e98
mov eax, 0x27e8
test eax, eax
jne 0x10026e98
and dword [ebp - 0x120], 0
jmp 0x10026ea2
mov dword [ebp - 0x120], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x64], 0x58ed
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x204]
cmp dword [ebp - 0x120], eax
je 0x10026ed1
mov dword [ebp - 0xa0], 1
jmp 0x10026ed8
and dword [ebp - 0xa0], 0
push 0
lea ecx, [ebp - 0x1e8]
call fcn.10017fdc
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x1bc]
jg 0x10026f24
mov dword [ebp - 0x128], 1
jmp 0x10026f2b
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x128], eax
jne 0x10026f49
mov dword [ebp - 0x1c4], 1
jmp 0x10026f50
and dword [ebp - 0x1c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x270], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x204], 0
jne 0x10026f83
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10026f83
and dword [ebp - 0xa8], 0
jmp 0x10026f8d
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0xa8]
je 0x10026fa4
mov dword [ebp - 0x80], 1
jmp 0x10026fa8
and dword [ebp - 0x80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x64], ecx
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x80], eax
jl 0x10026fcc
mov dword [ebp - 0x1cc], 1
jmp 0x10026fd3
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x210]
cmp dword [ebp - 0x78], eax
jl 0x10026ff1
mov dword [ebp - 0xb0], 1
jmp 0x10026ff8
and dword [ebp - 0xb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x210]
add eax, dword [ebp - 0xb0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x210]
jne 0x10027026
mov dword [ebp - 0x138], 1
jmp 0x1002702d
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
sub eax, 0x2097e65f
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x204]
jl 0x10027053
mov dword [ebp - 0xb8], 1
jmp 0x1002705a
and dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0x204], ecx
mov dword [ebp - 0x2c], 0
jmp 0x1002707d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x100270c8
mov dword [ebp - 0x68], 0
jmp 0x10027093
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x100270a9
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x23c], 0x187e526
jmp 0x1002708c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1e8]
call fcn.10017fdc
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x23c], eax
jmp 0x10027076
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e8]
call fcn.10017fc0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x140], 0x7182abbf
mov dword [ebp - 0x1d0], 0xde81d534
mov dword [ebp - 0x1b0], 0xf888c55
mov dword [ebp - 0x26c], 0x82b3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jne 0x1002712d
mov dword [ebp - 0x1ac], 1
jmp 0x10027134
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x20], 0
jne 0x10027143
mov eax, 0xea0
test eax, eax
je 0x10027147
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jl 0x1002715e
cmp dword [ebp - 0x20], 0
jne 0x1002715e
and dword [ebp - 0xc0], 0
jmp 0x10027168
mov dword [ebp - 0xc0], 1
imul eax, dword [ebp - 0xc0], 0
sub eax, 0xd635
je 0x10027188
cmp dword [ebp - 0x20], 0
je 0x10027188
mov dword [ebp - 0x148], 1
jmp 0x1002718f
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xa34c865b
jne 0x100271a7
mov dword [ebp - 0x1a8], 1
jmp 0x100271ae
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jne 0x100271c2
mov dword [ebp - 0xc8], 1
jmp 0x100271c9
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xfbb9cf7d
ja 0x100271e1
mov dword [ebp - 0x150], 1
jmp 0x100271e8
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x150], eax
jne 0x100271ff
mov dword [ebp - 0xd0], 1
jmp 0x10027206
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd0]
imul eax, eax, 0x26fb
cmp eax, dword [ebp - 0x1d0]
jg 0x10027229
mov dword [ebp - 0x158], 1
jmp 0x10027230
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x10027252
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x3c], 0x12
jmp 0x1002727c
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffffc
jle 0x10027562
mov dword [ebp - 0x1c], 1
push 3
lea ecx, [ebp - 0x1f4]
call fcn.10017f3e
mov dword [ebp - 4], 1
mov dword [ebp - 0x1b8], 0x116e074f
mov dword [ebp - 0x5c], 0
jmp 0x100272bb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x100272d4
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1f4]
call fcn.10017fdc
and dword [eax], 0
jmp 0x100272b4
mov dword [ebp - 0x1c], 0
jmp 0x100272e4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 7
jg 0x100274c0
mov dword [ebp - 0x40], 0x5b7d
mov eax, dword [ebp - 0x40]
neg eax
je 0x10027454
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x264], eax
push 2
lea ecx, [ebp - 0x1f4]
call fcn.10017fdc
mov dword [eax], 0xea14
mov eax, 0xea14
test eax, eax
jne 0x1002733b
push 2
lea ecx, [ebp - 0x1f4]
call fcn.10017fdc
cmp dword [ebp - 0x34], 0x703acb6d
je 0x10027350
mov dword [ebp - 0xd8], 1
jmp 0x10027357
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xd8], eax
jg 0x1002736e
mov dword [ebp - 0x160], 1
jmp 0x10027375
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x160]
jl 0x1002738c
mov dword [ebp - 0xe0], 1
jmp 0x10027393
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0x7ae9
jne 0x100273ab
mov dword [ebp - 0x168], 1
jmp 0x100273b2
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0x4e1054d8
jge 0x100273ca
mov dword [ebp - 0x170], 1
jmp 0x100273d1
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x170], eax
jne 0x100273e8
mov dword [ebp - 0xec], 1
jmp 0x100273ef
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0xffffffff
jae 0x10027404
mov dword [ebp - 0x13c], 1
jmp 0x1002740b
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xb752bf39
ja 0x10027423
mov dword [ebp - 0xf4], 1
jmp 0x1002742a
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0xf4]
jge 0x10027441
mov dword [ebp - 0x164], 1
jmp 0x10027448
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0x45fe
je 0x10027463
cmp dword [ebp - 0x34], 0
jne 0x10027463
and dword [ebp - 0xfc], 0
jmp 0x1002746d
mov dword [ebp - 0xfc], 1
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0xfc]
cmp eax, 0xf4d4e2
jge 0x1002748a
mov dword [ebp - 0x144], 1
jmp 0x10027491
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x144], eax
jge 0x100274a8
mov dword [ebp - 0x104], 1
jmp 0x100274af
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1b8], eax
jmp 0x100272dd
mov dword [ebp - 0x1c], 0
jmp 0x100274d0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 6
jne 0x1002754e
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x100274f8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
mov dword [ebp - 0x34], 0
jmp 0x10027508
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1e
jne 0x10027549
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10027531
push 0x1b06
push 0x2300
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x10027547
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x10027501
jmp 0x100274c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10017fc0
jmp 0x10027275
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x180]
mov dword [ecx], eax
jmp 0x10027d3c
push 1
lea ecx, [ebp - 0x17c]
call fcn.10017f3e
mov dword [ebp - 4], 2
mov dword [ebp - 0x88], 0xd42c
mov dword [ebp - 0x11c], 0x495e3b37
mov dword [ebp - 0x22c], 2
mov dword [ebp - 0x228], 2
mov dword [ebp - 0x224], 2
mov dword [ebp - 0x220], 2
mov dword [ebp - 0x124], 0xfffffffb
mov dword [ebp - 0x188], 0xe33a79cc
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x54], 0
jmp 0x100275f6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10027612
push dword [ebp - 0x54]
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
mov dword [eax], 1
jmp 0x100275ef
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x10027648
cmp dword [ebp - 0x88], 0
je 0x10027648
mov dword [ebp - 0x14c], 1
jmp 0x1002764f
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x14c], eax
jge 0x10027678
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
cmp dword [eax], 0
jne 0x10027678
and dword [ebp - 0x114], 0
jmp 0x10027682
mov dword [ebp - 0x114], 1
imul esi, dword [ebp - 0x114], 0xffff
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
cmp esi, dword [eax]
je 0x100276a9
mov dword [ebp - 0x16c], 1
jmp 0x100276b0
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x11c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
cmp dword [ebp - 0x11c], eax
jl 0x100276dd
mov dword [ebp - 0x154], 1
jmp 0x100276e4
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x254], eax
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov esi, dword [ebp - 0x188]
push 0
lea ecx, [ebp - 0x17c]
call fcn.10017fdc
cmp dword [eax], esi
jge 0x10027734
mov dword [ebp - 0x12c], 1
jmp 0x1002773b
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10027771
push 0x192e
push 0x1c2a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
call fcn.10017fc0
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x100278f7
mov dword [ebp - 0x18], 0xca4f833f
mov dword [ebp - 0x15c], 0xf3e76e5b
mov dword [ebp - 0x50], 0
jmp 0x100277b1
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x100277c7
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x260], 0
jmp 0x100277aa
mov dword [ebp - 0x18], 0
jmp 0x100277d7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100277ee
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x260], 0
je 0x100277ec
jmp 0x100277ee
jmp 0x100277d0
or eax, 0xffffffff
je 0x1002781b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x18], 0
jae 0x10027806
cmp dword [ebp - 0x18], 0
cmp dword [ebp - 0x15c], 0
je 0x1002781b
mov dword [ebp - 0x134], 1
jmp 0x10027822
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x134], eax
jle 0x10027839
mov dword [ebp - 0xe4], 1
jmp 0x10027840
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe4], eax
jne 0x10027857
mov dword [ebp - 0xe8], 1
jmp 0x1002785e
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 1
je 0x10027873
mov dword [ebp - 0xf0], 1
jmp 0x1002787a
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xf0], eax
jge 0x10027891
mov dword [ebp - 0x100], 1
jmp 0x10027898
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x260], ecx
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x100]
je 0x100278ce
mov dword [ebp - 0x1c0], 1
jmp 0x100278d5
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x18], 0xffffffff
push 0xe45
push 0xd31
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
push 3
lea ecx, [ebp - 0x4c]
call fcn.10017f3e
mov dword [ebp - 4], 3
mov dword [ebp - 0x30], 0x8a9017ca
mov dword [ebp - 0x70], 0x18b47430
mov dword [ebp - 0x60], 4
push 1
lea ecx, [ebp - 0x21c]
call fcn.10017f3e
mov byte [ebp - 4], 4
mov dword [ebp - 0x1a4], 0x94407742
mov dword [ebp - 0x10], 0
jmp 0x10027948
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10027961
push dword [ebp - 0x10]
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov dword [eax], 0xa5fef9d7
jmp 0x10027941
mov dword [ebp - 0x10], 0
jmp 0x10027971
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10027987
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x198], 0x5a7dd9ae
jmp 0x1002796a
mov dword [ebp - 0x10], 0
jmp 0x10027997
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100279ad
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x190], 0xffffffff
jmp 0x10027990
mov dword [ebp - 0x10], 0
jmp 0x100279bd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100279d9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x21c]
call fcn.10017fdc
mov dword [eax], 0x2b42d225
jmp 0x100279b6
push 2
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp dword [eax], 0
jne 0x100279f4
mov dword [ebp - 0x108], 1
jmp 0x100279fb
and dword [ebp - 0x108], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov eax, dword [eax]
sub eax, dword [ebp - 0x108]
mov dword [ebp - 0x30], eax
jne 0x10027b85
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x190]
inc ecx
push 4
pop edx
imul edx, edx, 0
mov dword [ebp + edx - 0x190], ecx
test eax, eax
jne 0x10027a5b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
jne 0x10027a5b
and dword [ebp - 0x1d4], 0
jmp 0x10027a65
mov dword [ebp - 0x1d4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x10027a9c
push 2
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp dword [eax], 0
jne 0x10027a9c
and dword [ebp - 0x110], 0
jmp 0x10027aa6
mov dword [ebp - 0x110], 1
imul eax, dword [ebp - 0x110], 3
sub eax, 0xfff8
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x198]
jne 0x10027acd
mov dword [ebp - 0x8c], 1
jmp 0x10027ad4
and dword [ebp - 0x8c], 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax]
jg 0x10027af4
mov dword [ebp - 0x1c8], 1
jmp 0x10027afb
and dword [ebp - 0x1c8], 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov esi, dword [ebp - 0x70]
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp esi, dword [eax]
jne 0x10027b22
mov dword [ebp - 0x94], 1
jmp 0x10027b29
and dword [ebp - 0x94], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax]
jg 0x10027b49
mov dword [ebp - 0x1a0], 1
jmp 0x10027b50
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp dword [ebp - 0x60], 0x196a
jle 0x10027b6f
mov dword [ebp - 0x9c], 1
jmp 0x10027b76
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x10027ba1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x190], 0
je 0x10027ba1
mov dword [ebp - 0xa4], 1
jmp 0x10027ba8
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [eax]
je 0x10027bc5
mov dword [ebp - 0x74], 1
jmp 0x10027bc9
and dword [ebp - 0x74], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x198], ecx
cmp dword [ebp - 0x74], 0
jne 0x10027beb
cmp dword [ebp - 0x30], 0
jne 0x10027beb
and dword [ebp - 0x7c], 0
jmp 0x10027bf2
mov dword [ebp - 0x7c], 1
push 0
lea ecx, [ebp - 0x21c]
call fcn.10017fdc
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x7c], eax
jl 0x10027c18
mov dword [ebp - 0xac], 1
jmp 0x10027c1f
and dword [ebp - 0xac], 0
push 2
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0xac]
cmp ecx, dword [eax]
jge 0x10027c3f
mov dword [ebp - 0xb4], 1
jmp 0x10027c46
and dword [ebp - 0xb4], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov esi, dword [eax]
sub esi, dword [ebp - 0xb4]
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp esi, dword [eax]
jge 0x10027c72
mov dword [ebp - 0xbc], 1
jmp 0x10027c79
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
sub eax, 5
jne 0x10027c93
cmp dword [ebp - 0x60], 0
jne 0x10027c93
and dword [ebp - 0xc4], 0
jmp 0x10027c9d
mov dword [ebp - 0xc4], 1
push 1
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0xc4]
cmp ecx, dword [eax]
jle 0x10027cbd
mov dword [ebp - 0xcc], 1
jmp 0x10027cc4
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
mov ecx, dword [ebp - 0xcc]
cmp ecx, dword [eax]
jg 0x10027ce4
mov dword [ebp - 0xd4], 1
jmp 0x10027ceb
and dword [ebp - 0xd4], 0
mov esi, dword [ebp - 0x60]
add esi, dword [ebp - 0xd4]
push 0
lea ecx, [ebp - 0x4c]
call fcn.10017fdc
cmp esi, dword [eax]
jne 0x10027d0e
mov dword [ebp - 0xdc], 1
jmp 0x10027d15
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x21c]
call fcn.10017fc0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.10017fc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret