Function at 0x10005a92
Capabilities:
Check os version
Encode data using xor
Get common file path

Disassembly:
push 0x25c
push 0x100c19d8
call fcn.10075ce0
xor esi, esi
mov dword [ebp - 0x214], esi
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x10005aab
cmp dword [ebp - 0x214], esi
jge 0x10005ac5
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10005ae1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x240], esi
cmp dword [ebp - 0x240], 0x23
jge 0x10005b20
mov eax, dword [ebp - 0x240]
and eax, reloc.WS2_32.dll_accept
jns 0x10005b05
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10005b12
inc dword [ebp - 0x214]
jmp 0x10005b18
dec dword [ebp - 0x214]
inc dword [ebp - 0x240]
jmp 0x10005aea
mov dword [ebp - 4], 0xfffffffe
call fcn.10005ba6
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0x20
jl 0x10005b2e
cmp dword [ebp - 0x214], 0xffff0001
jge 0x10005b55
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10005b71
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
inc eax
mov dword [ebp - 4], eax
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x1d
jge 0x10005bcf
mov ecx, dword [ebp - 0x26c]
and ecx, reloc.WS2_32.dll_accept
jns 0x10005b9a
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, eax
jne 0x10005bc1
inc dword [ebp - 0x214]
jmp 0x10005bc7
dec dword [ebp - 0x214]
inc dword [ebp - 0x26c]
jmp 0x10005b7e
mov dword [ebp - 4], 0xfffffffe
call fcn.10005c4a
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 0xc
jl 0x10005bdd
cmp dword [ebp - 0x214], 0
jge 0x10005bf8
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10005c14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 2
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0x1f
jge 0x10005c73
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x10005c3d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10005c65
inc dword [ebp - 0x214]
jmp 0x10005c6b
dec dword [ebp - 0x214]
inc dword [ebp - 0x220]
jmp 0x10005c22
mov dword [ebp - 4], 0xfffffffe
call fcn.10005d1a
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0x13
jl 0x10005c81
cmp dword [ebp - 0x214], 0
jge 0x10005ca5
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10005cc1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x10005cc3
cmp dword [ebp - 0x214], 0
jge 0x10005cde
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10005cfa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
xor ebx, ebx
inc ebx
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10005d0e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, ebx
jne 0x10005d35
add dword [ebp - 0x214], eax
jmp 0x10005d3b
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0x11
jl 0x10005cff
mov esi, 0x100a6ea4
push esi
push esi
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
call edi
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0x1c
jl 0x10005d52
cmp dword [ebp - 0x214], 0
jge 0x10005d76
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10005d92
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10005da3
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, ebx
jne 0x10005daf
add dword [ebp - 0x214], eax
jmp 0x10005db5
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x10005d94
push esi
push esi
call edi
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x10005dc1
cmp dword [ebp - 0x214], 0xffff0001
jge 0x10005de8
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10005e04
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, ebx
je 0x10005e1f
cmp edx, 4
je 0x10005e1f
and dword [ebp - 0x214], ecx
jmp 0x10005e25
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 8
jl 0x10005e06
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 3
pop eax
mov dword [ebp - 4], eax
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], eax
jge 0x10005e7f
mov ecx, dword [ebp - 0x248]
and ecx, reloc.WS2_32.dll_accept
jns 0x10005e65
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, ebx
jne 0x10005e71
inc dword [ebp - 0x214]
jmp 0x10005e77
dec dword [ebp - 0x214]
inc dword [ebp - 0x248]
jmp 0x10005e4a
mov dword [ebp - 4], 0xfffffffe
call fcn.10005ef0
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x10005e8d
cmp dword [ebp - 0x214], 0
jge 0x10005eb1
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10005ecd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10005ede
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10005f0b
add dword [ebp - 0x214], eax
jmp 0x10005f11
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xe
jl 0x10005ecf
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
push 4
pop edi
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10005f3d
cmp edx, edi
je 0x10005f3d
and dword [ebp - 0x214], ecx
jmp 0x10005f45
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 9
jl 0x10005f24
mov dword [ebp - 4], edi
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 6
jge 0x10005f8b
mov eax, dword [ebp - 0x228]
and eax, reloc.WS2_32.dll_accept
jns 0x10005f70
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10005f7d
inc dword [ebp - 0x214]
jmp 0x10005f83
dec dword [ebp - 0x214]
inc dword [ebp - 0x228]
jmp 0x10005f55
mov dword [ebp - 4], 0xfffffffe
call fcn.10006059
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x10005f99
cmp dword [ebp - 0x214], 0
jge 0x10005fbd
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10005fd9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xc
jl 0x10005fdb
cmp dword [ebp - 0x214], 0xffff0001
jge 0x10006002
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000601e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 5
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 8
jge 0x10006082
mov eax, dword [ebp - 0x268]
and eax, reloc.WS2_32.dll_accept
jns 0x10006047
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10006074
inc dword [ebp - 0x214]
jmp 0x1000607a
dec dword [ebp - 0x214]
inc dword [ebp - 0x268]
jmp 0x1000602c
mov dword [ebp - 4], 0xfffffffe
call fcn.100060b1
xor ecx, ecx
xor edi, edi
inc edi
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x100060cc
cmp edx, 4
je 0x100060cc
and dword [ebp - 0x214], ecx
jmp 0x100060d4
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x10006093
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, edi
je 0x100060f5
cmp edx, 4
je 0x100060f5
and dword [ebp - 0x214], ecx
jmp 0x100060fd
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x100060dc
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10006114
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, edi
jne 0x10006120
add dword [ebp - 0x214], eax
jmp 0x10006126
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xe
jl 0x10006105
push esi
push esi
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 4], 6
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 4
jge 0x10006177
mov eax, dword [ebp - 0x230]
and eax, reloc.WS2_32.dll_accept
jns 0x1000615d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, edi
jne 0x10006169
inc dword [ebp - 0x214]
jmp 0x1000616f
dec dword [ebp - 0x214]
inc dword [ebp - 0x230]
jmp 0x10006142
mov dword [ebp - 4], 0xfffffffe
call fcn.100061a7
xor ecx, ecx
push 7
pop edi
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x100061c2
cmp edx, 4
je 0x100061c2
and dword [ebp - 0x214], ecx
jmp 0x100061ca
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, edi
jl 0x10006188
mov dword [ebp - 4], edi
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 2
jge 0x1000620f
mov eax, dword [ebp - 0x250]
and eax, reloc.WS2_32.dll_accept
jns 0x100061f4
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10006201
inc dword [ebp - 0x214]
jmp 0x10006207
dec dword [ebp - 0x214]
inc dword [ebp - 0x250]
jmp 0x100061d9
mov dword [ebp - 4], 0xfffffffe
call fcn.1000623e
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000622c
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10006259
add dword [ebp - 0x214], eax
jmp 0x1000625f
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000621d
push esi
push esi
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
call edi
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x10006271
cmp dword [ebp - 0x214], 0xffff0001
jge 0x10006298
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100062b4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x100062d0
cmp edx, 4
je 0x100062d0
and dword [ebp - 0x214], ecx
jmp 0x100062d6
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 5
jl 0x100062b6
push 0xfa
lea eax, [ebp - 0x210]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x100062f2
cmp dword [ebp - 0x214], 0xffff0001
jge 0x10006319
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10006335
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x10006346
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10006353
add dword [ebp - 0x214], eax
jmp 0x10006359
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x10006337
push esi
push esi
call edi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, 1
je 0x1000637f
cmp edx, 4
je 0x1000637f
and dword [ebp - 0x214], ecx
jmp 0x10006387
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 5
jl 0x10006365
cmp dword [ebp - 0x214], 0xffff0001
jge 0x100063a8
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100063c4
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, 1
je 0x100063e0
cmp edx, 4
je 0x100063e0
and dword [ebp - 0x214], ecx
jmp 0x100063e6
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x100063c6
push 0xfa
lea eax, [ebp - 0x210]
push eax
call ebx
mov dword [ebp - 4], 8
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 6
jge 0x1000643e
mov eax, dword [ebp - 0x238]
and eax, reloc.WS2_32.dll_accept
jns 0x10006423
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10006430
inc dword [ebp - 0x214]
jmp 0x10006436
dec dword [ebp - 0x214]
inc dword [ebp - 0x238]
jmp 0x10006408
mov dword [ebp - 4], 0xfffffffe
call fcn.100064be
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000644c
cmp dword [ebp - 0x214], 0
jge 0x10006467
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10006483
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 9
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 1
jge 0x100064e7
mov eax, dword [ebp - 0x260]
and eax, reloc.WS2_32.dll_accept
jns 0x100064ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x100064d9
inc dword [ebp - 0x214]
jmp 0x100064df
dec dword [ebp - 0x214]
inc dword [ebp - 0x260]
jmp 0x10006491
mov dword [ebp - 4], 0xfffffffe
call fcn.1000653c
mov edi, 0xffff0001
cmp eax, edi
jge 0x10006505
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000651b
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000655b
cmp edx, 4
je 0x1000655b
and dword [ebp - 0x214], ecx
jmp 0x10006563
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000651d
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000656b
cmp dword [ebp - 0x214], 0
jge 0x10006586
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x100065a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x100065a4
cmp dword [ebp - 0x214], edi
jge 0x100065c7
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x100065e3
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x100065e5
cmp dword [ebp - 0x214], 0
jge 0x10006609
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10006625
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10006641
cmp edx, 4
je 0x10006641
and dword [ebp - 0x214], ecx
jmp 0x10006649
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x10006627
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x10006651
cmp dword [ebp - 0x214], edi
jge 0x10006674
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x10006690
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push esi
push esi
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
call edi
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x100066a8
cmp dword [ebp - 0x214], 0
jge 0x100066c3
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x100066df
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
push 3
pop ebx
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x100066f3
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x10006700
add dword [ebp - 0x214], eax
jmp 0x10006706
sub dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x100066e4
push esi
push esi
call edi
and dword [ebp - 0x214], 0
push 0xfa
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x1000672a
cmp dword [ebp - 0x214], 0
jge 0x10006744
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x10006760
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov dword [ebp - 0x214], eax
jge 0x10006773
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x10006789
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop edi
idiv edi
cmp edx, 1
je 0x100067a5
cmp edx, 4
je 0x100067a5
and dword [ebp - 0x214], ecx
jmp 0x100067ad
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000678b
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, ebx
jl 0x100067b5
cmp dword [ebp - 0x214], 0
jge 0x100067cf
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x100067eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0xa
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], ebx
jge 0x1000682e
mov eax, dword [ebp - 0x218]
and eax, reloc.WS2_32.dll_accept
jns 0x10006813
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10006820
inc dword [ebp - 0x214]
jmp 0x10006826
dec dword [ebp - 0x214]
inc dword [ebp - 0x218]
jmp 0x100067f9
mov dword [ebp - 4], 0xfffffffe
call fcn.10006865
push esi
push esi
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
call edi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x10006880
cmp edx, 4
je 0x10006880
and dword [ebp - 0x214], ecx
jmp 0x10006888
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x10006846
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x100068aa
cmp edx, 4
je 0x100068aa
and dword [ebp - 0x214], ecx
jmp 0x100068b0
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x10006890
push 0xfa
lea eax, [ebp - 0x210]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call ebx
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x100068db
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x100068e8
add dword [ebp - 0x214], eax
jmp 0x100068ee
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x100068cc
push esi
push esi
call edi
xor eax, eax
mov ecx, dword [ebp - 0x214]
sub ecx, eax
mov dword [ebp - 0x214], ecx
inc eax
cmp eax, 2
jl 0x10006900
cmp ecx, 0xffff0001
jge 0x1000691f