Function at 0x50bb30
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x5f4ae1
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x667050]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x74]
xor esi, esi
mov dword [esp + 0x68], esi
mov dword [esp + 0x74], esi
call fcn.004855c0
mov dword [esp + 0x24], eax
mov byte [eax + 0x15], 1
mov eax, dword [esp + 0x24]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x24]
mov dword [eax], eax
mov eax, dword [esp + 0x24]
mov dword [eax + 8], eax
mov dword [esp + 0x28], esi
mov ecx, 1
mov dword [esp + 0x68], ecx
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
mov byte [esp + 0x68], 2
mov eax, dword [esp + 0x70]
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov eax, dword [ebp + 4]
mov eax, dword [eax]
mov edi, ebp
mov esi, eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], esi
test edi, edi
mov ebx, dword [ebp + 4]
je 0x50bbd1
cmp edi, ebp
je 0x50bbd7
call dword [0x6105e8]
cmp esi, ebx
mov ebx, dword [0x6105e8]
je 0x50bc54
test edi, edi
jne 0x50bbe7
call ebx
cmp esi, dword [edi + 4]
jne 0x50bbee
call ebx
mov ecx, dword [esi + 0xc]
sub esp, 0x20
mov eax, esp
lea edx, [esi + 0x10]
mov dword [esp + 0x34], esp
mov dword [eax], ecx
push edx
lea ecx, [eax + 4]
call dword [0x610494]
cmp esi, dword [edi + 4]
jne 0x50bc10
call ebx
mov eax, dword [esi + 0x2c]
push eax
lea esi, [esp + 0x60]
call fcn.0050ef50
add esp, 0x24
push eax
lea esi, [esp + 0x30]
mov byte [esp + 0x6c], 3
call fcn.0050d880
lea ecx, [esp + 0x44]
mov byte [esp + 0x68], 2
call dword [0x6105a0]
lea esi, [esp + 0x18]
call fcn.0050e4e0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
jmp 0x50bbc6
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
mov edi, eax
jbe 0x50bc72
call ebx
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp esi, eax
jbe 0x50bc72
call ebx
mov ecx, edi
sub ecx, esi
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
push 0x50ad40
add ecx, edx
push ecx
push edi
push esi
call fcn.0050f120
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
add esp, 0x10
cmp eax, ecx
mov edi, eax
jbe 0x50bcb0
call ebx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
nop
cmp eax, ecx
mov esi, ecx
jbe 0x50bcc0
call ebx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
cmp edi, esi
je 0x50bd2b
cmp edi, ecx
jb 0x50bcca
call ebx
mov edx, dword [edi + 4]
lea eax, [esp + 0x14]
lea esi, [edi + 4]
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x18], edx
call fcn.00448390
cmp dword [eax], 0
jg 0x50bd18
cmp edi, dword [esp + 0x34]
jb 0x50bcef
call ebx
mov ecx, dword [esi]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x24]
mov dword [esp + 0x18], ecx
call fcn.00448390
add dword [eax], 1
cmp edi, dword [esp + 0x34]
jb 0x50bd0e
call ebx
push esi
mov esi, dword [esp + 0x74]
call fcn.0050d710
mov ecx, dword [esp + 0x34]
cmp edi, ecx
jb 0x50bd26
call ebx
mov ecx, dword [esp + 0x34]
add edi, 0x24
jmp 0x50bcab
xor ebx, ebx
cmp eax, ebx
mov byte [esp + 0x68], 1
je 0x50bd5d
cmp eax, ecx
mov edi, ecx
mov esi, eax
je 0x50bd54
mov edi, edi
lea ecx, [esi + 8]
call dword [0x6105a0]
add esi, 0x24
cmp esi, edi
jne 0x50bd40
mov eax, dword [esp + 0x30]
push eax
call fcn.005e6954
add esp, 4
lea eax, [esp + 0x20]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x68], 0
call fcn.004a7b00
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 8