Function at 0x50d339
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
mov eax, 0x675561
call fcn.006313fc
sub esp, 0x628
cmp byte [0x741818], 0
je 0x50e1dc
push ebx
push esi
push edi
push 0x5c
xor ebx, ebx
mov dword [esp + 0x1c], 0xca038230
pop eax
mov byte [0x741818], bl
mov dword [esp + 0x1c], 0xb2028230
mov dword [esp + 0x20], 0x10203a0
mov dword [esp + 0x24], 0x90202
mov dword [esp + 0x28], 0x9a6abb8
mov byte [esp + 0x2c], al
mov dword [esp + 0x2d], 0x304afe29
mov dword [esp + 0x31], 0x2a09060d
mov dword [esp + 0x35], 0xf7864886
mov dword [esp + 0x39], 0x501010d
mov dword [esp + 0x3d], 0x4c300005
mov dword [esp + 0x41], 0x9300b31
mov dword [esp + 0x45], 0x4550306
mov dword [esp + 0x49], 0x55021306
mov dword [esp + 0x4d], 0x300b3153
mov dword [esp + 0x51], 0x55030609
mov dword [esp + 0x55], 0x2130804
mov dword [esp + 0x59], 0x17314143
mov dword [esp + 0x5d], 0x3061530
mov dword [esp + 0x61], 0x130a0455
mov dword [esp + 0x65], 0x7469420e
mov dword [esp + 0x69], 0x72726f54
mov dword [esp + 0x6d], 0x20746e65
mov dword [esp + 0x71], 0x31636e49
mov dword [esp + 0x75], 0x6153017
mov dword [esp + 0x79], 0x3045503
mov dword [esp + 0x7d], 0x6f630e13
mov dword [esp + 0x81], 0x69622e6d
mov dword [esp + 0x85], 0x726f7474
mov dword [esp + 0x89], 0x746e6572
mov dword [esp + 0x8d], 0xd171e30
mov dword [esp + 0x91], 0x37303231
mov dword [esp + 0x95], 0x32323332
mov dword [esp + 0x99], 0x37353331
mov dword [esp + 0x9d], 0x310d175a
mov dword [esp + 0xa1], 0x32373034
mov dword [esp + 0xa5], 0x31323233
mov dword [esp + 0xa9], 0x5a373533
mov dword [esp + 0xad], 0xb314c30
mov dword [esp + 0xb1], 0x3060930
mov dword [esp + 0xb5], 0x13060455
mov dword [esp + 0xb9], 0x31535502
mov dword [esp + 0xbd], 0x609300b
mov dword [esp + 0xc1], 0x8045503
mov dword [esp + 0xc5], 0x41430213
mov dword [esp + 0xc9], 0x15301731
mov dword [esp + 0xcd], 0x4550306
mov dword [esp + 0xd1], 0x420e130a
mov dword [esp + 0xd5], 0x6f547469
mov dword [esp + 0xd9], 0x6e657272
mov dword [esp + 0xdd], 0x6e492074
mov dword [esp + 0xe1], 0x30173163
mov dword [esp + 0xe5], 0x55030615
mov dword [esp + 0xe9], 0xe130304
mov dword [esp + 0xed], 0x2e6d6f63
mov dword [esp + 0xf1], 0x74746962
mov dword [esp + 0xf5], 0x6572726f
mov dword [esp + 0xf9], 0x8230746e
mov dword [esp + 0xfd], 0xd302201
mov dword [esp + 0x101], 0x862a0906
mov dword [esp + 0x105], 0xdf78648
mov dword [esp + 0x109], 0x5010101
mov dword [esp + 0x10d], 0x1820300
mov dword [esp + 0x111], 0x8230000f
mov dword [esp + 0x115], 0x82020a01
mov dword [esp + 0x119], 0xda000101
mov dword [esp + 0x11d], 0x5710aeca
mov dword [esp + 0x121], 0x8e5f34fe
mov dword [esp + 0x125], 0xb9322fd6
mov dword [esp + 0x129], 0x6586324
mov dword [esp + 0x12d], 0x569743cc
mov dword [esp + 0x131], 0xdea31b9a
mov dword [esp + 0x135], 0x2b1bc9db
mov dword [esp + 0x139], 0xada6c948
push 0x18
pop ecx
mov dword [esp + 0x13d], 0x2ae18873
mov dword [esp + 0x141], 0xb0f1fa0e
mov dword [esp + 0x145], 0x86c758
mov dword [esp + 0x149], 0x94cf52e2
mov dword [esp + 0x14d], 0x3b8f168b
mov dword [esp + 0x151], 0xabcb0bcb
mov dword [esp + 0x155], 0xce0cdb33
mov dword [esp + 0x159], 0xc45a05ed
mov dword [esp + 0x15d], 0x6dc4dc49
mov dword [esp + 0x161], 0x39738f60
mov dword [esp + 0x165], 0xda9294de
mov dword [esp + 0x169], 0x23eaf9bc
mov dword [esp + 0x16d], 0x7cba3d09
mov dword [esp + 0x171], 0x7bbfa993
mov dword [esp + 0x175], 0xfafb4033
mov dword [esp + 0x179], 0x294203b3
mov dword [esp + 0x17d], 0x2f05799d
mov dword [esp + 0x181], 0x334253a
mov dword [esp + 0x185], 0x2831b43e
mov dword [esp + 0x189], 0xa12bb130
mov dword [esp + 0x18d], 0x484d047f
mov dword [esp + 0x191], 0xbd692945
mov dword [esp + 0x195], 0xc1287db4
mov dword [esp + 0x199], 0x4ee33947
mov dword [esp + 0x19d], 0x2b53c794
mov dword [esp + 0x1a1], 0x45ed4d30
mov dword [esp + 0x1a5], 0x85e96b6c
mov dword [esp + 0x1a9], 0x32cdde39
mov dword [esp + 0x1ad], 0xe6409746
mov dword [esp + 0x1b1], 0x7cdd227f
mov dword [esp + 0x1b5], 0x6c997f8
mov dword [esp + 0x1b9], 0x882a6d1a
mov dword [esp + 0x1bd], 0x74412746
mov dword [esp + 0x1c1], 0x5963fe25
mov dword [esp + 0x1c5], 0xb034ec4f
mov dword [esp + 0x1c9], 0x73b03b47
mov dword [esp + 0x1cd], 0x44b44446
mov dword [esp + 0x1d1], 0x648116b3
mov dword [esp + 0x1d5], 0xc7f19a25
mov dword [esp + 0x1d9], 0x867ff71c
mov dword [esp + 0x1dd], 0x13885ee2
mov dword [esp + 0x1e1], 0xc5e55dad
mov word [esp + 0x1e5], 0x7633
mov byte [esp + 0x1e7], 0x77
mov byte [esp + 0x1e8], cl
mov dword [esp + 0x1e9], 0xce216284
mov dword [esp + 0x1ed], 0x5af8b6fc
mov dword [esp + 0x1f1], 0x17575a3d
mov dword [esp + 0x1f5], 0x3e919dc1
mov dword [esp + 0x1f9], 0xc9e175a2
mov dword [esp + 0x1fd], 0xc50423bd
mov dword [esp + 0x201], 0x47882ed8
mov dword [esp + 0x205], 0x2e74d701
mov dword [esp + 0x209], 0x72dffebc
mov dword [esp + 0x20d], 0xf3f61255
mov dword [esp + 0x211], 0x567fe4de
mov dword [esp + 0x215], 0x110f26b3
mov dword [esp + 0x219], 0x27d7b2e
mov dword [esp + 0x21d], 0x1000103
mov dword [esp + 0x221], 0x30ae81a3
mov dword [esp + 0x225], 0x1d30ab81
mov dword [esp + 0x229], 0x1d550306
mov dword [esp + 0x22d], 0x416040e
mov dword [esp + 0x231], 0xf2010914
mov dword [esp + 0x235], 0x89de7d05
mov dword [esp + 0x239], 0xa9653c70
mov word [esp + 0x23d], 0xc2fd
mov byte [esp + 0x23f], 0xac
mov byte [esp + 0x240], cl
mov dword [esp + 0x241], 0x6425c6f4
mov dword [esp + 0x245], 0x67c3025
mov dword [esp + 0x249], 0x231d5503
mov dword [esp + 0x24d], 0x73307504
mov dword [esp + 0x251], 0x1091480
mov dword [esp + 0x255], 0xde7d05f2
mov dword [esp + 0x259], 0x653c7089
mov dword [esp + 0x25d], 0xacc2fda9
mov byte [esp + 0x261], cl
mov dword [esp + 0x262], 0x6425c6f4
mov dword [esp + 0x266], 0xa450a125
mov dword [esp + 0x26a], 0x314c304e
mov dword [esp + 0x26e], 0x609300b
mov dword [esp + 0x272], 0x6045503
mov dword [esp + 0x276], 0x53550213
mov dword [esp + 0x27a], 0x9300b31
mov dword [esp + 0x27e], 0x4550306
mov dword [esp + 0x282], 0x43021308
mov dword [esp + 0x286], 0x30173141
mov dword [esp + 0x28a], 0x55030615
mov dword [esp + 0x28e], 0xe130a04
mov dword [esp + 0x292], 0x54746942
mov dword [esp + 0x296], 0x6572726f
mov dword [esp + 0x29a], 0x4920746e
mov dword [esp + 0x29e], 0x1731636e
mov dword [esp + 0x2a2], 0x3061530
mov dword [esp + 0x2a6], 0x13030455
mov dword [esp + 0x2aa], 0x6d6f630e
mov dword [esp + 0x2ae], 0x7469622e
mov dword [esp + 0x2b2], 0x72726f74
mov dword [esp + 0x2b6], 0x82746e65
mov dword [esp + 0x2ba], 0xabb80009
mov word [esp + 0x2be], 0x9a6
mov byte [esp + 0x2c0], al
mov dword [esp + 0x2c1], 0x304afe29
mov dword [esp + 0x2c5], 0x5503060c
mov dword [esp + 0x2c9], 0x504131d
mov dword [esp + 0x2cd], 0x1010330
mov dword [esp + 0x2d1], 0x60d30ff
mov dword [esp + 0x2d5], 0x48862a09
mov dword [esp + 0x2d9], 0x10df786
mov dword [esp + 0x2dd], 0x50501
mov dword [esp + 0x2e1], 0x1018203
mov dword [esp + 0x2e5], 0xd28c6700
mov dword [esp + 0x2e9], 0x45cec288
mov dword [esp + 0x2ed], 0xaeb80d2b
mov dword [esp + 0x2f1], 0xdd5e084e
mov dword [esp + 0x2f5], 0xc96b2daf
mov dword [esp + 0x2f9], 0xd0792cc5
mov dword [esp + 0x2fd], 0x39b21c17
mov dword [esp + 0x301], 0xa02cb923
mov dword [esp + 0x305], 0x9c344ee3
mov dword [esp + 0x309], 0x229a39b2
mov dword [esp + 0x30d], 0xb66a8e24
mov dword [esp + 0x311], 0xf03f6789
mov dword [esp + 0x315], 0x364a3896
mov dword [esp + 0x319], 0xd7f527b0
mov dword [esp + 0x31d], 0x173d3e0d
mov dword [esp + 0x321], 0xb36af565
mov dword [esp + 0x325], 0x84445f65
mov dword [esp + 0x329], 0xf2b61283
mov dword [esp + 0x32d], 0x9048217f
mov dword [esp + 0x331], 0xa4f9dca7
mov dword [esp + 0x335], 0x7564048f
mov dword [esp + 0x339], 0x203cbfe9
mov dword [esp + 0x33d], 0x5a135d04
mov dword [esp + 0x341], 0x6936767b
mov dword [esp + 0x345], 0x8d98052b
mov dword [esp + 0x349], 0xc04cbf57
mov dword [esp + 0x34d], 0xb847f832
mov dword [esp + 0x351], 0xba2178b5
mov dword [esp + 0x355], 0x87337e4f
mov dword [esp + 0x359], 0x6ad60e46
mov dword [esp + 0x35d], 0x749ba461
mov dword [esp + 0x361], 0x49bcabfc
mov word [esp + 0x365], 0x6b04
mov byte [esp + 0x367], 0xec
mov byte [esp + 0x368], al
mov dword [esp + 0x369], 0xc9f18104
mov dword [esp + 0x36d], 0xebd510f6
mov dword [esp + 0x371], 0x65a715dd
mov dword [esp + 0x375], 0xa3366b2
mov dword [esp + 0x379], 0x1ee70d27
mov dword [esp + 0x37d], 0xfc9e8533
mov dword [esp + 0x381], 0x3a299667
mov dword [esp + 0x385], 0x7186d087
mov dword [esp + 0x389], 0x49049242
mov dword [esp + 0x38d], 0xd181e28a
mov dword [esp + 0x391], 0xd2599b69
mov dword [esp + 0x395], 0x33411d90
mov dword [esp + 0x399], 0x9a9c6640
mov byte [esp + 0x3dc], al
lea eax, [esp + 0x410]
push str.trusted
push eax
mov dword [esp + 0x3a5], 0x9de8e8e0
mov dword [esp + 0x3a9], 0x2103c52d
mov dword [esp + 0x3ad], 0x586553f2
mov dword [esp + 0x3b1], 0x77903b5a
mov dword [esp + 0x3b5], 0x3c308d02
mov dword [esp + 0x3b9], 0x786d5a9f
mov dword [esp + 0x3bd], 0xd50db2d8
mov dword [esp + 0x3c1], 0xc7d96680
mov dword [esp + 0x3c5], 0x8e4f8ec2
mov dword [esp + 0x3c9], 0x5a0ec743
mov dword [esp + 0x3cd], 0x84e88aa4
mov dword [esp + 0x3d1], 0x4aff30c8
mov dword [esp + 0x3d5], 0xc02be7a0
mov dword [esp + 0x3d9], 0x14ec873d
mov dword [esp + 0x3dd], 0xb7c8d204
mov word [esp + 0x3e1], 0x164
mov byte [esp + 0x3e3], 0x48
mov dword [esp + 0x3e5], 0x313dd510
mov dword [esp + 0x3e9], 0x1398a75e
mov byte [esp + 0x3ed], 0xe3
call fcn.0046e883
cmp dword [esp + 0x424], 8
mov esi, dword [esp + 0x410]
mov dword [esp + 0x63c], ebx
jae 0x50de0c
lea esi, [esp + 0x410]
push 0x105
push esi
lea eax, [esp + 0x430]
push eax
call fcn.004243e1
mov ebx, esi
xor edi, edi
lea ecx, [ebx + 2]
mov ax, word [ebx]
add ebx, 2
cmp ax, di
jne 0x50de26
sub ebx, ecx
push 0x5c
sar ebx, 1
pop eax
push esi
mov word [esp + ebx*2 + 0x42c], ax
call fcn.0045e908
test al, al
jne 0x50deef
push edi
push esi
call dword [sym.imp.KERNEL32.DLL_CreateDirectoryW]
mov eax, 0x104
sub eax, ebx
push eax
lea eax, [esp + 0x42e]
push str.bittorrent.crt
lea eax, [eax + ebx*2]
push eax
call fcn.004243e1
push 0x80
push 7
lea eax, [esp + 0x430]
push eax
call fcn.0045eeaa
mov dword [esp + 0xc], eax
mov ebx, 0x3ce
cmp eax, 0xffffffff
je 0x50deab
push ebx
lea ecx, [esp + 0x1c]
push ecx
push eax
call fcn.0045f311
lea eax, [esp + 0xc]
push eax
call fcn.0045ee3a
push ebx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
call fcn.0050d058
lea ecx, [esp + 0x10]
mov byte [esp + 0x63c], 1
call fcn.0050e8c6
test al, al
je 0x50ded8
lea ecx, [esp + 0x10]
call fcn.0050e9a4
xor eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x63c], al
call fcn.0050d131
jmp 0x50e1c8
xor eax, eax
mov dword [esp + 0x3e8], eax
mov dword [esp + 0x3ec], eax
mov dword [esp + 0x3f0], eax
push eax
push esi
lea eax, [esp + 0x3f0]
mov byte [esp + 0x644], 2
push eax
call fcn.0045ea15
mov eax, dword [esp + 0x3ec]
sub eax, dword [esp + 0x3e8]
push 0x18
cdq
pop ecx
idiv ecx
test eax, eax
je 0x50e1bc
push ebp
push 0x8000
call fcn.0045d923
mov esi, dword [esp + 0x3ec]
mov ebp, eax
mov edi, dword [esp + 0x3f0]
cmp esi, edi
je 0x50e1b3
mov ecx, 0x104
lea edx, [esp + 0x42e]
sub ecx, ebx
lea edx, [edx + ebx*2]
mov dword [esp + 0x408], ecx
mov dword [esp + 0x3f8], edx
cmp dword [esi + 0x14], 8
jb 0x50df85
mov eax, dword [esi]
jmp 0x50df87
mov eax, esi
push ecx
push eax
push edx
call fcn.004243e1
push 0x80
push 4
lea eax, [esp + 0x434]
push eax
call fcn.0045eeaa
mov dword [esp + 0x400], eax
cmp eax, 0xffffffff
je 0x50e198
lea ecx, [esp + 0x404]
push ecx
xor ecx, ecx
push ecx
push ecx
push 0x8000
push ebp
push eax
call fcn.0045f0c6
mov ebx, eax
lea eax, [esp + 0x400]
push eax
call fcn.0045ee3a
test ebx, ebx
jne 0x50e198
mov ebx, dword [esp + 0x404]
test ebx, ebx
je 0x50e198
cmp ebx, 0x1b
jb 0x50e072
push 0x1b
push str._____BEGIN_CERTIFICATE_____
push ebp
call fcn.006342b2
add esp, 0xc
test eax, eax
jne 0x50e072
push 0x1b
pop edx
mov ecx, eax
cmp ebx, edx
jbe 0x50e055
mov al, byte [edx + ebp]
cmp al, 0x2f
jb 0x50e01e
cmp al, 0x39
jbe 0x50e04c
cmp al, 0x41
jb 0x50e026
cmp al, 0x5a
jbe 0x50e04c
cmp al, 0x61
jb 0x50e02e
cmp al, 0x7a
jbe 0x50e04c
cmp al, 0x2b
je 0x50e04c
cmp al, 0x3d
je 0x50e04c
cmp al, 0xa
je 0x50e050
cmp al, 0xd
je 0x50e050
cmp al, 9
je 0x50e050
cmp al, 0xb
je 0x50e050
cmp al, 0x20
jne 0x50e055
jmp 0x50e050
mov byte [ecx + ebp], al
inc ecx
inc edx
cmp edx, ebx
jb 0x50e013
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ecx
push eax
push ebp
push ecx
push ebp
call fcn.0056b862
test eax, eax
jne 0x50e198
mov ebx, dword [esp + 0x10]
test ebp, ebp
je 0x50e198
push ebx
push ebp
lea ecx, [esp + 0x1c]
call fcn.0050d058
lea ecx, [esp + 0x14]
mov byte [esp + 0x640], 3
call fcn.0050e8c6
test al, al
je 0x50e187
mov eax, dword [esp + 0x14]
push 0xf
add eax, 0xc3
push str.com.bittorrent
push eax
call fcn.006342b2
add esp, 0xc
test eax, eax
jne 0x50e168
cmp ebx, 0x3ce
mov ebx, 0x3ce
jne 0x50e0e3
push ebx
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.006342b2
add esp, 0xc
test eax, eax
je 0x50e168
push 0x80
push 7
lea eax, [esp + 0x434]
push eax
call fcn.0045eeaa
mov dword [esp + 0x3fc], eax
cmp eax, 0xffffffff
je 0x50e11c
push ebx
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.0045f311
lea eax, [esp + 0x3fc]
push eax
call fcn.0045ee3a
push ebx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x414]
call fcn.0050d058
lea ecx, [esp + 0x40c]
mov byte [esp + 0x640], 4
call fcn.0050e8c6
test al, al
je 0x50e152
lea ecx, [esp + 0x40c]
call fcn.0050e9a4
lea ecx, [esp + 0x40c]
mov byte [esp + 0x640], 3
call fcn.0050d131
jmp 0x50e187
lea ecx, [esp + 0x14]
call fcn.0050e9a4
mov eax, dword [esp + 0x14]
add eax, 0xc3
push eax
push str._s_trusted_n
call fcn.00408ce1
pop ecx
pop ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x640], 2
call fcn.0050d131
mov ecx, dword [esp + 0x408]
mov edx, dword [esp + 0x3f8]
push 0x18
pop eax
add esi, eax
cmp esi, edi
jne 0x50df7b
push 1
push ebp
call fcn.0045d916
pop ebp
lea ecx, [esp + 0x3e8]
call fcn.00434945
xor eax, eax
lea ecx, [esp + 0x410]
push eax
push 1
call fcn.0042341c
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x628]
mov dword fs:[0], ecx
leave
ret