Function at 0x10001ec6
Capabilities:
Check os version
Encode data using xor
Get common file path

Disassembly:
push 0x22c
push 0x100c1c50
call fcn.10075ce0
xor ebx, ebx
mov dword [ebp - 0x214], ebx
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0x2d
jl 0x10001edf
cmp dword [ebp - 0x214], ebx
jge 0x10001f02
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10001f1e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop esi
idiv esi
cmp edx, 1
je 0x10001f3a
cmp edx, 4
je 0x10001f3a
and dword [ebp - 0x214], ecx
jmp 0x10001f42
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 0x26
jl 0x10001f20
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0xa
jl 0x10001f4a
cmp dword [ebp - 0x214], ebx
jge 0x10001f6d
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10001f89
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10001f9a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10001fa7
add dword [ebp - 0x214], eax
jmp 0x10001fad
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x10001f8b
mov esi, 0x100a6ea4
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x228], ebx
cmp dword [ebp - 0x228], 7
jge 0x10001fff
mov eax, dword [ebp - 0x228]
and eax, reloc.WS2_32.dll_accept
jns 0x10001fe4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10001ff1
inc dword [ebp - 0x214]
jmp 0x10001ff7
dec dword [ebp - 0x214]
inc dword [ebp - 0x228]
jmp 0x10001fc9
mov dword [ebp - 4], 0xfffffffe
call fcn.1000208c
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xf
jl 0x1000200d
mov edi, 0xffff0001
cmp dword [ebp - 0x214], edi
jge 0x10002035
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10002051
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x23c], ebx
cmp dword [ebp - 0x23c], 0x17
jge 0x100020b5
mov ecx, dword [ebp - 0x23c]
and ecx, reloc.WS2_32.dll_accept
jns 0x10002079
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, eax
jne 0x100020a7
inc dword [ebp - 0x214]
jmp 0x100020ad
dec dword [ebp - 0x214]
inc dword [ebp - 0x23c]
jmp 0x1000205d
mov dword [ebp - 4], 0xfffffffe
call fcn.1000216c
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
cmp eax, ebx
jge 0x100020d7
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x100020f3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 0x1a
jl 0x100020f5
cmp dword [ebp - 0x214], ebx
jge 0x1000210f
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000212b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x220], ebx
cmp dword [ebp - 0x220], 1
jge 0x10002195
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x10002153
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10002187
inc dword [ebp - 0x214]
jmp 0x1000218d
dec dword [ebp - 0x214]
inc dword [ebp - 0x220]
jmp 0x10002138
mov dword [ebp - 4], 0xfffffffe
call fcn.100022c4
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x100021a3
cmp dword [ebp - 0x214], edi
jge 0x100021c6
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100021e2
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x100021e4
cmp dword [ebp - 0x214], ebx
jge 0x10002207
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10002223
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x10002225
cmp dword [ebp - 0x214], ebx
jge 0x1000223f
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000225b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x1000225d
cmp dword [ebp - 0x214], edi
jge 0x10002280
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000229c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x100022df
cmp edx, 4
je 0x100022df
and dword [ebp - 0x214], ecx
jmp 0x100022e5
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 0xf
jl 0x1000229e
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 4], 3
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xe
jge 0x10002341
mov eax, dword [ebp - 0x230]
and eax, reloc.WS2_32.dll_accept
jns 0x10002326
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10002333
inc dword [ebp - 0x214]
jmp 0x10002339
dec dword [ebp - 0x214]
inc dword [ebp - 0x230]
jmp 0x1000230b
mov dword [ebp - 4], 0xfffffffe
call fcn.10002373
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000238e
cmp edx, 4
je 0x1000238e
and dword [ebp - 0x214], ecx
jmp 0x10002394
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 5
jl 0x1000234f
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x100023ae
cmp dword [ebp - 0x214], edi
jge 0x100023d1
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100023ed
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002409
cmp edx, 4
je 0x10002409
and dword [ebp - 0x214], ecx
jmp 0x10002411
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 9
jl 0x100023ef
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x10002419
cmp dword [ebp - 0x214], 0
jge 0x10002434
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10002450
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000246c
cmp edx, 4
je 0x1000246c
and dword [ebp - 0x214], ecx
jmp 0x10002472
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x10002452
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ebx, ebx
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000249d
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x100024aa
add dword [ebp - 0x214], eax
jmp 0x100024b0
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000248e
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x214], ebx
cmp ebx, ebx
jge 0x100024d3
mov eax, ebx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x100024ef
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x218], ebx
cmp dword [ebp - 0x218], 6
jge 0x10002532
mov eax, dword [ebp - 0x218]
and eax, reloc.WS2_32.dll_accept
jns 0x10002517
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10002524
inc dword [ebp - 0x214]
jmp 0x1000252a
dec dword [ebp - 0x214]
inc dword [ebp - 0x218]
jmp 0x100024fc
mov dword [ebp - 4], 0xfffffffe
call fcn.10002607
xor eax, eax
sub ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 2
jl 0x10002540
cmp ecx, edi
jge 0x1000255b
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 7
pop ebx
idiv ebx
test edx, edx
je 0x10002575
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
mov dword [ebp - 0x214], ecx
xor eax, eax
and ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 7
jl 0x10002577
test ecx, ecx
jns 0x10002592
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 0xd
pop ebx
idiv ebx
test edx, edx
jne 0x100025ac
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov dword [ebp - 0x214], ecx
xor eax, eax
and ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 5
jl 0x100025ae
test ecx, ecx
jns 0x100025c9
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x100025e1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002625
cmp edx, 4
je 0x10002625
and dword [ebp - 0x214], ecx
jmp 0x1000262b
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x100025e3
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
push 7
pop ebx
sub dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x10002648
cmp dword [ebp - 0x214], edi
jge 0x1000266a
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
je 0x10002685
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x10002687
cmp dword [ebp - 0x214], 0
jge 0x100026ab
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x100026c7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x100026c9
cmp dword [ebp - 0x214], 0
jge 0x100026e3
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x100026fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000270f
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000271c
add dword [ebp - 0x214], eax
jmp 0x10002722
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x10002700
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
mov dword [ebp - 0x214], eax
jge 0x10002743
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10002759
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x1000275b
cmp dword [ebp - 0x214], 0
jge 0x10002775
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
mov ecx, ebx
idiv ecx
test edx, edx
jne 0x10002790
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 5
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], ebx
jge 0x100027d3
mov eax, dword [ebp - 0x238]
and eax, reloc.WS2_32.dll_accept
jns 0x100027b8
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x100027c5
inc dword [ebp - 0x214]
jmp 0x100027cb
dec dword [ebp - 0x214]
inc dword [ebp - 0x238]
jmp 0x1000279e
mov dword [ebp - 4], 0xfffffffe
call fcn.1000281f
mov dword [ebp - 4], 6
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0
jge 0x10002848
mov eax, dword [ebp - 0x21c]
and eax, reloc.WS2_32.dll_accept
jns 0x10002808
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000283a
inc dword [ebp - 0x214]
jmp 0x10002840
dec dword [ebp - 0x214]
inc dword [ebp - 0x21c]
jmp 0x100027ed
mov dword [ebp - 4], 0xfffffffe
call fcn.1000292f
xor eax, eax
sub ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 5
jl 0x10002856
cmp ecx, edi
jge 0x10002871
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 7
pop ebx
idiv ebx
test edx, edx
je 0x1000288b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
mov dword [ebp - 0x214], ecx
xor eax, eax
sub ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 2
jl 0x1000288d
cmp ecx, edi
jge 0x100028a8
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 7
pop ebx
idiv ebx
test edx, edx
je 0x100028c2
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
mov dword [ebp - 0x214], ecx
xor eax, eax
and ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 2
jl 0x100028c4
test ecx, ecx
jns 0x100028df
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x100028f7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000294d
cmp edx, 4
je 0x1000294d
and dword [ebp - 0x214], ecx
jmp 0x10002953
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 8
jl 0x1000290b
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002987
cmp edx, 4
je 0x10002987
and dword [ebp - 0x214], ecx
jmp 0x1000298d
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 8
jl 0x1000296d
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x100029a7
cmp dword [ebp - 0x214], edi
jge 0x100029ca
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100029e6
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x100029e8
cmp dword [ebp - 0x214], edi
jge 0x10002a0b
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10002a27
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10002a38
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10002a45
add dword [ebp - 0x214], eax
jmp 0x10002a4b
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x10002a29
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002a75
cmp edx, 4
je 0x10002a75
and dword [ebp - 0x214], ecx
jmp 0x10002a7d
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x10002a5b
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x10002a8d
cmp dword [ebp - 0x214], 0
jge 0x10002ab1
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10002acd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x10002acf
cmp dword [ebp - 0x214], edi
jge 0x10002af2
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ebx
mov ecx, ebx
idiv ecx
test edx, edx
je 0x10002b10
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
test eax, eax
jns 0x10002b23
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10002b39
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], ebx
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 4
jge 0x10002b79
mov eax, dword [ebp - 0x224]
and eax, reloc.WS2_32.dll_accept
jns 0x10002b5e
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10002b6b
inc dword [ebp - 0x214]
jmp 0x10002b71
dec dword [ebp - 0x214]
inc dword [ebp - 0x224]
jmp 0x10002b43
mov dword [ebp - 4], 0xfffffffe
call fcn.10002bab
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002bc6
cmp edx, 4
je 0x10002bc6
and dword [ebp - 0x214], ecx
jmp 0x10002bce
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x10002b87
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10002be5
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10002bf2
add dword [ebp - 0x214], eax
jmp 0x10002bf8
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x10002bd6
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10002c22
cmp edx, 4
je 0x10002c22
and dword [ebp - 0x214], ecx
jmp 0x10002c2a
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x10002c08
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
test eax, eax
jns 0x10002c46
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10002c62
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 8
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 1
jge 0x10002ca6
mov eax, dword [ebp - 0x22c]
and eax, reloc.WS2_32.dll_accept
jns 0x10002c8b
mov dword [ebp - 4], 0xfffffffe
call fcn.10002d0d
cmp dword [ebp - 0x214], edi
jge 0x10002cc9