Function at 0x1000d717
Capabilities:
Check os version
Encode data using xor
Get common file path

Disassembly:
push 0x22c
push 0x100c15c0
call fcn.10075ce0
and dword [ebp - 0x214], 0
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop esi
idiv esi
cmp edx, 1
je 0x1000d749
cmp edx, 4
je 0x1000d749
and dword [ebp - 0x214], ecx
jmp 0x1000d74f
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 0xd
jl 0x1000d72f
mov edi, 0xfa
push edi
lea eax, [ebp - 0x210]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
call esi
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 0x1e
jl 0x1000d76c
cmp dword [ebp - 0x214], 0
jge 0x1000d790
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000d7ac
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000d7c8
cmp edx, 4
je 0x1000d7c8
and dword [ebp - 0x214], ecx
jmp 0x1000d7ce
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 0x12
jl 0x1000d7ae
push edi
lea eax, [ebp - 0x210]
push eax
call esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000d7fa
cmp edx, 4
je 0x1000d7fa
and dword [ebp - 0x214], ecx
jmp 0x1000d800
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 9
jl 0x1000d7e0
push edi
lea eax, [ebp - 0x210]
push eax
call esi
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 0xc
jl 0x1000d812
cmp dword [ebp - 0x214], 0
jge 0x1000d82d
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d849
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000d865
cmp edx, 4
je 0x1000d865
and dword [ebp - 0x214], ecx
jmp 0x1000d86d
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000d84b
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 9
jl 0x1000d875
cmp dword [ebp - 0x214], 0
jge 0x1000d899
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000d8b5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000d8b7
cmp dword [ebp - 0x214], 0
jge 0x1000d8d2
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d8ee
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000d90a
cmp edx, 4
je 0x1000d90a
and dword [ebp - 0x214], ecx
jmp 0x1000d912
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000d8f0
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000d934
cmp edx, 4
je 0x1000d934
and dword [ebp - 0x214], ecx
jmp 0x1000d93c
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 8
jl 0x1000d91a
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000d944
cmp dword [ebp - 0x214], 0
jge 0x1000d968
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000d984
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 0xd
jl 0x1000d986
cmp dword [ebp - 0x214], 0
jge 0x1000d9a1
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000d9bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000d9bf
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000d9e6
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000da02
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000da1e
cmp edx, 4
je 0x1000da1e
and dword [ebp - 0x214], ecx
jmp 0x1000da24
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 0xa
jl 0x1000da04
push edi
lea eax, [ebp - 0x210]
push eax
call esi
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000da45
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000da52
add dword [ebp - 0x214], eax
jmp 0x1000da58
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 0xa
jl 0x1000da36
mov edi, 0x100a6ea4
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowW]
and dword [ebp - 4], 0
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0xc
jge 0x1000daac
mov eax, dword [ebp - 0x228]
and eax, reloc.WS2_32.dll_accept
jns 0x1000da91
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000da9e
inc dword [ebp - 0x214]
jmp 0x1000daa4
dec dword [ebp - 0x214]
inc dword [ebp - 0x228]
jmp 0x1000da76
mov dword [ebp - 4], 0xfffffffe
call fcn.1000db21
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000daba
cmp dword [ebp - 0x214], 0
jge 0x1000dade
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000dafa
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000db3c
cmp edx, 4
je 0x1000db3c
and dword [ebp - 0x214], ecx
jmp 0x1000db42
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 9
jl 0x1000dafc
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
xor ebx, ebx
inc ebx
cmp edx, ebx
je 0x1000db74
cmp edx, 4
je 0x1000db74
and dword [ebp - 0x214], ecx
jmp 0x1000db7a
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 7
jl 0x1000db58
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
mov dword [ebp - 4], ebx
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 4
jge 0x1000dbcd
mov eax, dword [ebp - 0x23c]
and eax, reloc.WS2_32.dll_accept
jns 0x1000dbb3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, ebx
jne 0x1000dbbf
inc dword [ebp - 0x214]
jmp 0x1000dbc5
dec dword [ebp - 0x214]
inc dword [ebp - 0x23c]
jmp 0x1000db98
mov dword [ebp - 4], 0xfffffffe
call fcn.1000dc45
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000dbdb
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000dc02
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000dc1e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000dc60
cmp edx, 4
je 0x1000dc60
and dword [ebp - 0x214], ecx
jmp 0x1000dc66
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 6
jl 0x1000dc20
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
mov dword [ebp - 4], 2
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 1
jge 0x1000dcbe
mov eax, dword [ebp - 0x220]
and eax, reloc.WS2_32.dll_accept
jns 0x1000dca3
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000dcb0
inc dword [ebp - 0x214]
jmp 0x1000dcb6
dec dword [ebp - 0x214]
inc dword [ebp - 0x220]
jmp 0x1000dc88
mov dword [ebp - 4], 0xfffffffe
call fcn.1000dcf1
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000dd0c
cmp edx, 4
je 0x1000dd0c
and dword [ebp - 0x214], ecx
jmp 0x1000dd14
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000dccc
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000dd36
cmp edx, 4
je 0x1000dd36
and dword [ebp - 0x214], ecx
jmp 0x1000dd3e
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000dd1c
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000dd55
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000dd62
add dword [ebp - 0x214], eax
jmp 0x1000dd68
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 6
jl 0x1000dd46
push edi
push edi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push edi
push edi
call ebx
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000dd8a
cmp dword [ebp - 0x214], 0
jge 0x1000ddae
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000ddca
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000dde6
cmp edx, 4
je 0x1000dde6
and dword [ebp - 0x214], ecx
jmp 0x1000ddec
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000ddcc
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000de1c
cmp edx, 4
je 0x1000de1c
and dword [ebp - 0x214], ecx
jmp 0x1000de24
nop
nop
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000de02
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000de3b
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000de48
add dword [ebp - 0x214], eax
jmp 0x1000de4e
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000de2c
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowW]
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000de5e
cmp dword [ebp - 0x214], 0
jge 0x1000de79
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000de95
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000deb1
cmp edx, 4
je 0x1000deb1
and dword [ebp - 0x214], ecx
jmp 0x1000deb7
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 3
jl 0x1000de97
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000dedc
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000dee9
add dword [ebp - 0x214], eax
jmp 0x1000deef
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000decd
push edi
push edi
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
call ebx
xor eax, eax
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000df01
cmp dword [ebp - 0x214], 0xffff0001
jge 0x1000df28
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
je 0x1000df44
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
push edi
push edi
call ebx
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 8
jl 0x1000df56
cmp dword [ebp - 0x214], 0
jge 0x1000df71
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000df8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000df9e
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000dfab
add dword [ebp - 0x214], eax
jmp 0x1000dfb1
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000df8f
push edi
push edi
call ebx
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 4
jl 0x1000dfbd
cmp dword [ebp - 0x214], 0
jge 0x1000dfe1
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000dffd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 3
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 2
jge 0x1000e041
mov eax, dword [ebp - 0x230]
and eax, reloc.WS2_32.dll_accept
jns 0x1000e026
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000e033
inc dword [ebp - 0x214]
jmp 0x1000e039
dec dword [ebp - 0x214]
inc dword [ebp - 0x230]
jmp 0x1000e00b
mov dword [ebp - 4], 0xfffffffe
call fcn.1000e074
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000e08f
cmp edx, 4
je 0x1000e08f
and dword [ebp - 0x214], ecx
jmp 0x1000e095
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 5
jl 0x1000e04f
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
mov dword [ebp - 4], 4
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 8
jge 0x1000e0ed
mov eax, dword [ebp - 0x218]
and eax, reloc.WS2_32.dll_accept
jns 0x1000e0d2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000e0df
inc dword [ebp - 0x214]
jmp 0x1000e0e5
dec dword [ebp - 0x214]
inc dword [ebp - 0x218]
jmp 0x1000e0b7
mov dword [ebp - 4], 0xfffffffe
call fcn.1000e15b
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 7
jl 0x1000e0fb
cmp dword [ebp - 0x214], 0
jge 0x1000e116
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000e132
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
mov ecx, eax
and ecx, reloc.WS2_32.dll_accept
jns 0x1000e143
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, 1
jne 0x1000e176
add dword [ebp - 0x214], eax
jmp 0x1000e17c
sub dword [ebp - 0x214], eax
inc eax
cmp eax, 5
jl 0x1000e134
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000e1a6
cmp edx, 4
je 0x1000e1a6
and dword [ebp - 0x214], ecx
jmp 0x1000e1ac
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000e18c
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
xor ebx, ebx
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000e1c4
cmp dword [ebp - 0x214], ebx
jge 0x1000e1e7
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000e203
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x238], ebx
cmp dword [ebp - 0x238], 6
jge 0x1000e246
mov eax, dword [ebp - 0x238]
and eax, reloc.WS2_32.dll_accept
jns 0x1000e22b
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1000e238
inc dword [ebp - 0x214]
jmp 0x1000e23e
dec dword [ebp - 0x214]
inc dword [ebp - 0x238]
jmp 0x1000e210
mov dword [ebp - 4], 0xfffffffe
call fcn.1000e3e8
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000e254
cmp dword [ebp - 0x214], ebx
jge 0x1000e26e
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000e28a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
xor eax, eax
and dword [ebp - 0x214], eax
inc eax
cmp eax, 2
jl 0x1000e28c
cmp dword [ebp - 0x214], ebx
jge 0x1000e2af
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000e2cb
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor eax, eax
xor dword [ebp - 0x214], eax
inc eax
cmp eax, 3
jl 0x1000e2cd
cmp dword [ebp - 0x214], ebx
jge 0x1000e2e7
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000e303
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], ebx
jge 0x1000e311
neg dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000e32d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], ebx
jge 0x1000e344
mov eax, dword [ebp - 0x214]
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000e360
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov ebx, dword [ebp - 0x214]
mov dword [ebp - 0x214], ebx
test ebx, ebx
jns 0x1000e378
neg ebx
mov dword [ebp - 0x214], ebx
mov eax, ebx
cdq
push 7
pop ecx
idiv ecx
test edx, edx
jne 0x1000e392
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [ebp - 0x214], ebx
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowW]
test ebx, ebx
jns 0x1000e3a7
imul ebx, ebx, 0xfffffffb
mov dword [ebp - 0x214], ebx
mov eax, ebx
cdq
push 0xd
pop ecx
idiv ecx
test edx, edx
jne 0x1000e3bf
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000e403
cmp edx, 4
je 0x1000e403
and dword [ebp - 0x214], ecx
jmp 0x1000e409
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 2
jl 0x1000e3c1
mov ebx, 0xfa
push ebx
lea eax, [ebp - 0x210]
push eax
call esi
and dword [ebp - 0x214], 0
push ebx
lea eax, [ebp - 0x210]
push eax
call esi
xor ecx, ecx
mov eax, ecx
cdq
push 5
pop ebx
idiv ebx
cmp edx, 1
je 0x1000e44b
cmp edx, 4
je 0x1000e44b
and dword [ebp - 0x214], ecx
jmp 0x1000e451
sub dword [ebp - 0x214], ecx
inc ecx
cmp ecx, 4
jl 0x1000e431
push 0xfa
lea eax, [ebp - 0x210]
push eax
call esi
push edi
push edi
call dword [sym.imp.USER32.dll_FindWindowW]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x214], ecx
cmp ecx, 0xffff0001
jge 0x1000e48a
imul ecx, ecx, 0xfffffffb
mov dword [ebp - 0x214], ecx
mov eax, ecx
cdq
push 7
pop esi
idiv esi
test edx, edx
je 0x1000e4a4