Function at 0x1000b7bb
Capabilities:
Check os version
Encode data using xor
Get common file path

Disassembly:
push 0x224
push 0x100c16c8
call fcn.10075ce0
xor edi, edi
xor eax, eax
mov dword [ebp - 0x214], eax
xor ecx, ecx
and eax, ecx
mov dword [ebp - 0x214], eax
inc ecx
cmp ecx, 0xb
jl 0x1000b7d6
cmp eax, edi
jge 0x1000b7f1
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000b807
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x214], edi
cmp edi, edi
jge 0x1000b81c
mov eax, edi
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000b838
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000b83a
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000b861
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000b87d
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000b88e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000b89b
add dword [ebp - 0x214], eax
jmp 0x1000b8a1
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xb
jl 0x1000b87f
mov esi, 0x100a6ea4
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000b8b6
cmp dword [ebp - 0x214], edi
jge 0x1000b8d0
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000b8ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
push 4
pop ebx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, 1
je 0x1000b90a
cmp edx, ebx
je 0x1000b90a
and dword [ebp - 0x214], ecx
jmp 0x1000b912
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000b8f1
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x1000b91a
cmp dword [ebp - 0x214], 0
jge 0x1000b93e
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000b95a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, 1
je 0x1000b975
cmp edx, ebx
je 0x1000b975
and dword [ebp - 0x214], ecx
jmp 0x1000b97b
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, ebx
jl 0x1000b95c
mov edi, 0xfa
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
mov dword [ebp - 0x214], eax
jge 0x1000b9a6
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000b9bc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000b9be
cmp dword [ebp - 0x214], 0
jge 0x1000b9d9
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000b9f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
and dword [ebp - 4], 0
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], ebx
jge 0x1000ba35
mov eax, dword [ebp - 0x230]
and eax, reloc.WS2_32.dll_accept
jns 0x1000ba1a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000ba27
inc dword [ebp - 0x214]
jmp 0x1000ba2d
dec dword [ebp - 0x214]
inc dword [ebp - 0x230]
jmp 0x1000ba00
mov dword [ebp - 4], 0xfffffffe
call fcn.1000baac
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000ba43
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000ba6a
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000ba86
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000bac7
cmp edx, 4
je 0x1000bac7
and dword [ebp - 0x214], ecx
jmp 0x1000bacf
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000ba88
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000bae6
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000baf3
add dword [ebp - 0x214], eax
jmp 0x1000baf9
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000bad7
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x1000bb09
cmp dword [ebp - 0x214], 0
jge 0x1000bb2d
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000bb49
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x1000bb4b
cmp dword [ebp - 0x214], 0
jge 0x1000bb6f
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000bb8b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000bba7
cmp edx, 4
je 0x1000bba7
and dword [ebp - 0x214], ecx
jmp 0x1000bbad
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000bb8d
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
xor ebx, ebx
inc ebx
cmp edx, ebx
je 0x1000bbdf
cmp edx, 4
je 0x1000bbdf
and dword [ebp - 0x214], ecx
jmp 0x1000bbe5
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000bbc3
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x1000bbfb
cmp dword [ebp - 0x214], 0
jge 0x1000bc16
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000bc32
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000bc48
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000bc6f
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000bc8b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000bc8d
cmp dword [ebp - 0x214], 0
jge 0x1000bca8
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000bcc4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], ebx
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 2
jge 0x1000bd03
mov eax, dword [ebp - 0x234]
and eax, reloc.WS2_32.dll_accept
jns 0x1000bce9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, ebx
jne 0x1000bcf5
inc dword [ebp - 0x214]
jmp 0x1000bcfb
dec dword [ebp - 0x214]
inc dword [ebp - 0x234]
jmp 0x1000bcce
mov dword [ebp - 4], 0xfffffffe
call fcn.1000bd82
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, 0xffff0001
jge 0x1000bd2b
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000bd41
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 2
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], ebx
jge 0x1000bdab
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x1000bd69
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, ebx
jne 0x1000bd9d
inc dword [ebp - 0x214]
jmp 0x1000bda3
dec dword [ebp - 0x214]
inc dword [ebp - 0x220]
jmp 0x1000bd4f
mov dword [ebp - 4], 0xfffffffe
call fcn.1000bee1
mov ebx, dword [ebp - 0x214]
mov dword [ebp - 0x214], ebx
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x214], ebx
cmp ebx, 0xffff0001
jge 0x1000bde4
mov eax, ebx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000be00
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000be02
cmp dword [ebp - 0x214], 0
jge 0x1000be1d
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000be39
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000be3b
cmp dword [ebp - 0x214], 0
jge 0x1000be56
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000be72
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov ebx, dword [ebp - 0x214]
mov dword [ebp - 0x214], ebx
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
and ebx, eax
mov dword [ebp - 0x214], ebx
inc eax
cmp eax, 2
jl 0x1000be88
test ebx, ebx
jns 0x1000bea3
imul ebx, ebx, 0xfffffffb
mov dword [ebp - 0x214], ebx
mov eax, ebx
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000bebb
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000befc
cmp edx, 4
je 0x1000befc
and dword [ebp - 0x214], ecx
jmp 0x1000bf04
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000bebd
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000bf1b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000bf28
add dword [ebp - 0x214], eax
jmp 0x1000bf2e
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000bf0c
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000bf3e
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000bf65
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000bf81
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000bf83
cmp dword [ebp - 0x214], 0
jge 0x1000bf9e
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000bfba
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
and dword [ebp - 0x214], 0
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000bfdd
cmp edx, 4
je 0x1000bfdd
and dword [ebp - 0x214], ecx
jmp 0x1000bfe3
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000bfc3
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c008
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000c015
add dword [ebp - 0x214], eax
jmp 0x1000c01b
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000bff9
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c02b
mov ebx, 0xffff0001
mov eax, dword [ebp - 0x214]
cmp eax, ebx
jge 0x1000c04f
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c065
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c067
cmp dword [ebp - 0x214], 0
jge 0x1000c082
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c09e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, ebx
jge 0x1000c0b7
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c0cd
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 3
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 4
jge 0x1000c111
mov eax, dword [ebp - 0x218]
and eax, reloc.WS2_32.dll_accept
jns 0x1000c0f6
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000c103
inc dword [ebp - 0x214]
jmp 0x1000c109
dec dword [ebp - 0x214]
inc dword [ebp - 0x218]
jmp 0x1000c0db
mov dword [ebp - 4], 0xfffffffe
call fcn.1000c1d0
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c12d
cmp dword [ebp - 0x214], 0
jge 0x1000c148
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c164
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000c166
cmp dword [ebp - 0x214], ebx
jge 0x1000c189
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c1a5
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000c1eb
cmp edx, 4
je 0x1000c1eb
and dword [ebp - 0x214], ecx
jmp 0x1000c1f1
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000c1a7
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000c221
cmp edx, 4
je 0x1000c221
and dword [ebp - 0x214], ecx
jmp 0x1000c227
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000c207
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
push 4
pop eax
mov dword [ebp - 4], eax
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], eax
jge 0x1000c292
mov ecx, dword [ebp - 0x228]
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c277
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000c284
inc dword [ebp - 0x214]
jmp 0x1000c28a
dec dword [ebp - 0x214]
inc dword [ebp - 0x228]
jmp 0x1000c25c
mov dword [ebp - 4], 0xfffffffe
call fcn.1000c33e
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
test eax, eax
jns 0x1000c2b4
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c2d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, 0xffff0001
jge 0x1000c2fa
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c316
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c327
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000c359
add dword [ebp - 0x214], eax
jmp 0x1000c35f
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000c318
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 5
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 4
jge 0x1000c3b1
mov eax, dword [ebp - 0x21c]
and eax, reloc.WS2_32.dll_accept
jns 0x1000c396
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000c3a3
inc dword [ebp - 0x214]
jmp 0x1000c3a9
dec dword [ebp - 0x214]
inc dword [ebp - 0x21c]
jmp 0x1000c37b
mov dword [ebp - 4], 0xfffffffe
call fcn.1000c3e3
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000c3fe
cmp edx, 4
je 0x1000c3fe
and dword [ebp - 0x214], ecx
jmp 0x1000c404
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000c3bf
push edi
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 6
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0
jge 0x1000c45c
mov eax, dword [ebp - 0x224]
and eax, reloc.WS2_32.dll_accept
jns 0x1000c441
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000c44e
inc dword [ebp - 0x214]
jmp 0x1000c454
dec dword [ebp - 0x214]
inc dword [ebp - 0x224]
jmp 0x1000c426
mov dword [ebp - 4], 0xfffffffe
call fcn.1000c4d2
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c46a
cmp dword [ebp - 0x214], 0
jge 0x1000c48e
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000c4aa
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000c4bb
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000c4ed
add dword [ebp - 0x214], eax
jmp 0x1000c4f3
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c4ac
push esi
push esi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000c505
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000c52c
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000c548
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jge 0x1000c557
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000c573
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
and dword [ebp - 0x214], 0
jge 0x1000c58b
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000c5a7