Function at 0x50e130
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fce61
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x6baac0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
call fcn.00420a70
lea ecx, [ebx + 0x20]
mov dword [ebp - 4], 0
call fcn.00420610
lea ecx, [ebx + 0x80]
mov byte [ebp - 4], 1
mov dword [ebx], vtable.TlsProtocol.0
mov dword [ebx + 0x20], vtable.TlsProtocol.1.0
mov byte [ebx + 0x28], 0
mov dword [ebx + 0x2c], 3
mov dword [ebx + 0x30], 3
mov byte [ebx + 0x34], 0
mov dword [ebx + 0x38], 0
mov dword [ebx + 0x3c], 0
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x78], 0
mov dword [ebx + 0x7c], 0x1010100
call fcn.00420e20
lea ecx, [ebx + 0xf4]
mov byte [ebp - 4], 2
call fcn.00420e20
lea ecx, [ebx + 0x194]
mov byte [ebp - 4], 3
mov dword [ebx + 0x168], 0x200
mov dword [ebx + 0x16c], 0
mov byte [ebx + 0x170], 0
mov dword [ebx + 0x174], 0
mov dword [ebx + 0x178], 0
mov dword [ebx + 0x17c], 0
mov dword [ebx + 0x180], 0
mov byte [ebx + 0x18c], 0
mov dword [ebx + 0x190], 0
call fcn.004118f0
lea ecx, [ebx + 0x1b4]
mov byte [ebp - 4], 4
mov byte [ebx + 0x1b0], 1
call fcn.004118f0
lea ecx, [ebx + 0x1d0]
mov byte [ebp - 4], 5
call fcn.004118f0
lea ecx, [ebx + 0x1f8]
mov byte [ebp - 4], 6
mov dword [ebx + 0x1ec], 0
mov dword [ebx + 0x1f0], 0
mov byte [ebx + 0x1f4], 0
call fcn.004118f0
lea ecx, [ebx + 0x214]
mov byte [ebp - 4], 7
call fcn.004118f0
lea ecx, [ebx + 0x270]
mov byte [ebp - 4], 8
mov dword [ebx + 0x234], 0
mov dword [ebx + 0x238], 0
mov dword [ebx + 0x23c], 0
mov dword [ebx + 0x240], 0
mov dword [ebx + 0x244], 0
mov dword [ebx + 0x248], 0
mov dword [ebx + 0x24c], 0
mov dword [ebx + 0x250], 0
mov dword [ebx + 0x254], 1
mov dword [ebx + 0x258], 0
mov dword [ebx + 0x25c], 0
mov byte [ebx + 0x260], 0
mov dword [ebx + 0x26c], 0
call fcn.004118f0
lea ecx, [ebx + 0x28c]
mov byte [ebp - 4], 9
call fcn.00440c50
mov byte [ebp - 4], 0xa
mov dword [ebx + 0x2b0], 0
lea ecx, [ebx + 0x2b4]
call fcn.004118f0
lea ecx, [ebx + 0x2d4]
mov byte [ebp - 4], 0xb
mov dword [ebx + 0x2d0], 0
call fcn.004118f0
lea esi, [ebx + 0x2f4]
mov word [ebx + 0x2f0], 0
mov dword [ebp - 0x14], esi
lea ecx, [esi + 0x14]
mov byte [ebp - 4], 0xc
mov dword [esi], vtable.TlsRawRecord.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov byte [esi + 0x10], 0
call fcn.004118f0
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 0xd
call fcn.004118f0
lea ecx, [esi + 0x4c]
mov byte [ebp - 4], 0xe
call fcn.004118f0
mov byte [esi + 0x68], 0
push 3
push 0x65604c
lea ecx, [ebx + 0x80]
mov byte [ebp - 4], 0xf
call fcn.00421840
call fcn.00515a20
mov dword [ebx + 0x184], eax
test eax, eax
je 0x50e3f9
cmp dword [eax + 0x94], 0xab450092
je 0x50e3f9
push 0
call fcn.0040c4e0
add esp, 4
call fcn.00515a20
mov dword [ebx + 0x188], eax
test eax, eax
je 0x50e41e
cmp dword [eax + 0x94], 0xab450092
je 0x50e41e
push 0
call fcn.0040c4e0
add esp, 4
call fcn.004440e0
mov dword [ebx + 0x230], eax
call fcn.00515a20
mov dword [ebx + 0x264], eax
test eax, eax
je 0x50e44e
cmp dword [eax + 0x94], 0xab450092
je 0x50e44e
push 0
call fcn.0040c4e0
add esp, 4
call fcn.00515a20
mov dword [ebx + 0x268], eax
test eax, eax
je 0x50e473
cmp dword [eax + 0x94], 0xab450092
je 0x50e473
push 0
call fcn.0040c4e0
add esp, 4
xor eax, eax
mov dword [ebx + 0x50], 5
mov word [ebx + 0x44], ax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x5c], eax
mov dword [ebx + 0x60], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], eax
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x70], eax
mov dword [ebx + 0x74], eax
mov eax, ebx
mov dword [ebx + 0x48], 0x65bef8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret