Function at 0x1000c78f
Capabilities:
Check os version
Encode data using xor
Get common file path

Disassembly:
push 0x228
push 0x100c1648
call fcn.10075ce0
xor edi, edi
mov dword [ebp - 0x214], edi
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0x10
jl 0x1000c7a8
mov esi, 0xffff0001
cmp dword [ebp - 0x214], esi
jge 0x1000c7d0
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c7ec
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0x11
jl 0x1000c7ee
cmp dword [ebp - 0x214], esi
jge 0x1000c811
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c82d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0x23
jl 0x1000c82f
cmp dword [ebp - 0x214], esi
jge 0x1000c852
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c86e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x234], edi
xor edi, edi
inc edi
cmp dword [ebp - 0x234], 0x15
jge 0x1000c8af
mov eax, dword [ebp - 0x234]
and eax, reloc.WS2_32.dll_accept
jns 0x1000c895
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000c8a1
inc dword [ebp - 0x214]
jmp 0x1000c8a7
dec dword [ebp - 0x214]
inc dword [ebp - 0x234]
jmp 0x1000c87a
mov dword [ebp - 4], 0xfffffffe
call fcn.1000c914
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 0x15
jl 0x1000c8bd
cmp dword [ebp - 0x214], 0
jge 0x1000c8d8
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c8f4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c905
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000c92f
add dword [ebp - 0x214], eax
jmp 0x1000c935
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xc
jl 0x1000c8f6
mov esi, 0x100a6ea4
push esi
push esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000c94c
cmp dword [ebp - 0x214], 0
jge 0x1000c967
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c983
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c985
cmp dword [ebp - 0x214], 0
jge 0x1000c9a0
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c9bc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c9cd
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000c9d9
add dword [ebp - 0x214], eax
jmp 0x1000c9df
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c9be
push esi
push esi
call ebx
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c9eb
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000ca12
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000ca2e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], edi
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], edi
jge 0x1000ca6c
mov eax, dword [ebp - 0x238]
and eax, reloc.WS2_32.dll_accept
jns 0x1000ca52
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000ca5e
inc dword [ebp - 0x214]
jmp 0x1000ca64
dec dword [ebp - 0x214]
inc dword [ebp - 0x238]
jmp 0x1000ca38
mov dword [ebp - 4], 0xfffffffe
call fcn.1000cb19
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x1000ca7a
cmp dword [ebp - 0x214], 0
jge 0x1000ca95
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000cab1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x1000cab3
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000cada
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000caf6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000cb34
cmp edx, 4
je 0x1000cb34
and dword [ebp - 0x214], ecx
jmp 0x1000cb3a
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 6
jl 0x1000caf8
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000cb54
cmp dword [ebp - 0x214], 0
jge 0x1000cb78
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000cb94
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x1000cb96
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000cbbd
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000cbd9
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000cbf4
cmp edx, 4
je 0x1000cbf4
and dword [ebp - 0x214], ecx
jmp 0x1000cbfa
sub dword [ebp - 0x214], ecx
inc ecx
push 7
pop ebx
cmp ecx, ebx
jl 0x1000cbdb
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x1000cc16
cmp dword [ebp - 0x214], 0
jge 0x1000cc39
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000cc55
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
test eax, eax
jns 0x1000cc6d
neg eax
mov dword [ebp - 0x214], eax
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x1000cc82
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov dword [ebp - 0x214], eax
jge 0x1000cc95
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000ccab
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000ccad
cmp dword [ebp - 0x214], 0
jge 0x1000ccc8
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
idiv ebx
test edx, edx
jne 0x1000cce1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000cce3
cmp dword [ebp - 0x214], 0
jge 0x1000cd07
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000cd23
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000cd34
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000cd40
add dword [ebp - 0x214], eax
jmp 0x1000cd46
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000cd25
push esi
push esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000cd58
cmp dword [ebp - 0x214], 0
jge 0x1000cd7c
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000cd98
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push esi
push esi
call ebx
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000cdc3
cmp edx, 4
je 0x1000cdc3
and dword [ebp - 0x214], ecx
jmp 0x1000cdc9
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 6
jl 0x1000cdaa
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000ce04
cmp edx, 4
je 0x1000ce04
and dword [ebp - 0x214], ecx
jmp 0x1000ce0a
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 8
jl 0x1000cdeb
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000ce3d
cmp edx, 4
je 0x1000ce3d
and dword [ebp - 0x214], ecx
jmp 0x1000ce45
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 7
jl 0x1000ce24
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000ce4d
cmp dword [ebp - 0x214], 0
jge 0x1000ce68
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000ce84
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
push 2
pop eax
mov dword [ebp - 4], eax
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], eax
jge 0x1000cec6
mov ecx, dword [ebp - 0x22c]
and ecx, reloc.WS2_32.dll_accept
jns 0x1000ceac
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000ceb8
inc dword [ebp - 0x214]
jmp 0x1000cebe
dec dword [ebp - 0x214]
inc dword [ebp - 0x22c]
jmp 0x1000ce91
mov dword [ebp - 4], 0xfffffffe
call fcn.1000cf0e
mov dword [ebp - 4], 3
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], edi
jge 0x1000cf37
mov eax, dword [ebp - 0x224]
and eax, reloc.WS2_32.dll_accept
jns 0x1000cefa
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000cf29
inc dword [ebp - 0x214]
jmp 0x1000cf2f
dec dword [ebp - 0x214]
inc dword [ebp - 0x224]
jmp 0x1000cee0
mov dword [ebp - 4], 0xfffffffe
call fcn.1000cf91
cmp dword [ebp - 0x214], 0
jge 0x1000cf52
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000cf6e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000cfac
cmp edx, 4
je 0x1000cfac
and dword [ebp - 0x214], ecx
jmp 0x1000cfb4
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000cf70
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000cfd5
cmp edx, 4
je 0x1000cfd5
and dword [ebp - 0x214], ecx
jmp 0x1000cfdb
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000cfbc
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp dword [ebp - 0x214], 0
jge 0x1000d002
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d01e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d020
cmp dword [ebp - 0x214], 0
jge 0x1000d03b
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d057
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
push esi
push esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
xor eax, eax
mov dword [ebp - 0x214], eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000d069
cmp dword [ebp - 0x214], 0
jge 0x1000d084
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d0a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000d0b1
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000d0bd
add dword [ebp - 0x214], eax
jmp 0x1000d0c3
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d0a2
push esi
push esi
call ebx
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000d0de
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000d0ea
add dword [ebp - 0x214], eax
jmp 0x1000d0f0
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d0cf
push esi
push esi
call ebx
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x214], ecx
cmp ecx, 0xffff0001
jge 0x1000d117
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 7
pop ebx
idiv ebx
test edx, edx
je 0x1000d131
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
mov dword [ebp - 0x214], ecx
test ecx, ecx
jns 0x1000d13e
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 0xd
pop ebx
idiv ebx
test edx, edx
jne 0x1000d158
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov dword [ebp - 0x214], ecx
mov dword [ebp - 4], 4
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 3
jge 0x1000d197
mov eax, dword [ebp - 0x218]
and eax, reloc.WS2_32.dll_accept
jns 0x1000d181
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000d188
inc ecx
jmp 0x1000d189
dec ecx
mov dword [ebp - 0x214], ecx
inc dword [ebp - 0x218]
jmp 0x1000d166
mov dword [ebp - 4], 0xfffffffe
call fcn.1000d1c6
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000d1e1
cmp edx, 4
je 0x1000d1e1
and dword [ebp - 0x214], ecx
jmp 0x1000d1e9
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000d1a5
xor ebx, ebx
mov dword [ebp - 0x214], ebx
cmp ebx, ebx
jge 0x1000d206
mov eax, ebx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000d222
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x21c], ebx
cmp dword [ebp - 0x21c], 2
jge 0x1000d264
mov eax, dword [ebp - 0x21c]
and eax, reloc.WS2_32.dll_accept
jns 0x1000d24a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000d256
inc dword [ebp - 0x214]
jmp 0x1000d25c
dec dword [ebp - 0x214]
inc dword [ebp - 0x21c]
jmp 0x1000d22f
mov dword [ebp - 4], 0xfffffffe
mov ebx, 0xffff0001
call fcn.1000d33c
cmp eax, ebx
jge 0x1000d282
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000d298
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, ebx
jge 0x1000d2b1
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000d2c7
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x214], eax
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, ebx
jge 0x1000d2f6
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000d312
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000d323
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000d35b
add dword [ebp - 0x214], eax
jmp 0x1000d361
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d314
push esi
push esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
and dword [ebp - 0x214], 0
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000d39b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000d3a7
add dword [ebp - 0x214], eax
jmp 0x1000d3ad
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d38c
push esi
push esi
call ebx
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x1000d3d2
cmp edx, 4
je 0x1000d3d2
and dword [ebp - 0x214], ecx
jmp 0x1000d3d8
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000d3b9
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 6
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], edi
jge 0x1000d432
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x1000d418
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000d424
inc dword [ebp - 0x214]
jmp 0x1000d42a
dec dword [ebp - 0x214]
inc dword [ebp - 0x220]
jmp 0x1000d3fe
mov dword [ebp - 4], 0xfffffffe
call fcn.1000d4b2
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d440
cmp dword [ebp - 0x214], 0
jge 0x1000d45b
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ebx
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x1000d479
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], ebx
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 2
jge 0x1000d4db
mov eax, dword [ebp - 0x228]
and eax, reloc.WS2_32.dll_accept
jns 0x1000d49e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x1000d4cd
inc dword [ebp - 0x214]
jmp 0x1000d4d3
dec dword [ebp - 0x214]
inc dword [ebp - 0x228]
jmp 0x1000d483
mov dword [ebp - 4], 0xfffffffe
call fcn.1000d50c
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000d4f8
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x1000d527
add dword [ebp - 0x214], eax
jmp 0x1000d52d
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d4e9
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop esi
idiv esi
cmp edx, edi
je 0x1000d556
cmp edx, 4
je 0x1000d556
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000d53d