Function at 0x50ec80
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a4864
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push esi
mov ebx, ecx
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
mov dword [esp + 0x10], ebx
call dword [eax + 0x18]
mov eax, dword [ebp + 0xc]
dec eax
cmp eax, 6
ja case.default.0x50ecc3
jmp dword [eax*4 + 0x50f198]
push 0
push edi
mov ecx, ebx
call fcn.0050d920
test eax, eax
je case.default.0x50ecc3
push 0
mov ecx, edi
call fcn.0050c1f0
cmp eax, 0x13
jne case.default.0x50ecc3
push 1
push edi
mov ecx, ebx
call fcn.0050d920
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x78
call fcn.00519e50
add esp, 4
mov dword [esp + 0xc], eax
xor esi, esi
cmp eax, esi
mov dword [esp + 0x84], esi
je 0x50ed31
push edi
mov ecx, eax
call fcn.0050ec10
mov esi, eax
test esi, esi
mov dword [esp + 0x84], 0xffffffff
je case.default.0x50ecc3
mov ecx, esi
call fcn.0050d500
test eax, eax
je 0x50f179
mov edx, dword [0x148b844]
mov eax, dword [0x148b840]
push edx
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
lea edx, [esp + 0x3c]
push edx
mov ecx, edi
call fcn.0050bb10
mov ecx, eax
call fcn.004f9970
mov eax, dword [esp + 0x20]
add eax, 0x13880
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.0050d080
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x20]
call fcn.00404e90
mov edx, dword [eax]
mov eax, dword [eax + 4]
push 0x13880
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
call fcn.0050cda0
push 0x8a200202
mov ecx, ebx
push esi
call fcn.0050d760
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 2
mov ecx, edi
call fcn.0050b710
test eax, eax
je case.default.0x50ecc3
lea ecx, [esp + 0x54]
call fcn.00576920
push edi
lea eax, [esp + 0x58]
push eax
mov ecx, ebx
mov dword [esp + 0x8c], 1
call fcn.0050cea0
test eax, eax
je 0x50ee6d
mov esi, dword [esp + 0x58]
xor ebx, ebx
test esi, esi
je 0x50ee6d
jmp 0x50ee30
mov eax, esi
mov edi, dword [eax + 8]
mov eax, dword [edi + 0x84]
test eax, eax
mov esi, dword [esi]
je 0x50ee54
push 1
push 0xb
push 3
call dword [sym.imp.SanCalc.dll_int___cdecl_rnd_int__enum_RANDOM_KIND__int_]
add esp, 0xc
test eax, eax
jne 0x50ee69
mov ecx, dword [esp + 0xc]
push ebx
push edi
push ecx
call fcn.0052a770
add esp, 0xc
add ebx, 0x12c
test esi, esi
jne 0x50ee30
lea ecx, [esp + 0x54]
mov dword [esp + 0x84], 0xffffffff
call fcn.00576940
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, edi
call fcn.0050ba10
cmp eax, 0xffffffff
je case.default.0x50ecc3
push eax
call fcn.0052a660
mov esi, eax
add esp, 4
test esi, esi
je case.default.0x50ecc3
push edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x1c], 0x15
call fcn.0052a600
mov edx, dword [esp + 0x24]
add esp, 4
mov edi, eax
mov eax, dword [edi + 4]
mov ecx, dword [edi]
add edx, 0x9c40
push edx
push eax
push ecx
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x2c]
call fcn.004f9970
push eax
mov ecx, esi
call fcn.0050d080
mov ecx, dword [edi + 4]
mov eax, dword [edi]
push 0x9c40
lea edx, [esp + 0x18]
mov dword [esp + 0x1c], ecx
push edx
mov ecx, esi
mov dword [esp + 0x1c], eax
call fcn.0050cda0
push 0x82000204
push esi
mov ecx, ebx
call fcn.0050d760
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 1
mov ecx, edi
call fcn.0050abf0
test eax, eax
je case.default.0x50ecc3
push 0x74
call fcn.00519e50
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x84], 2
je 0x50ef71
push 0xffffffffffffffff
push 0
mov ecx, eax
call fcn.0050eb00
mov esi, eax
jmp 0x50ef73
xor esi, esi
test esi, esi
mov dword [esp + 0x84], 0xffffffff
je case.default.0x50ecc3
mov eax, dword [edi + 0x48]
lea ebx, [eax + eax*2]
shl ebx, 2
mov eax, dword [ebx + 0x5c3c00]
push 8
push eax
mov ecx, esi
call fcn.0050d350
test eax, eax
mov ecx, esi
je 0x50f17b
push 0x7d
mov dword [esi + 0x14], edi
mov dword [esi + 0x1c], 0x15
call fcn.00519f70
mov edx, dword [esi]
push 0x4804
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [ebx + 0x5c3c08]
mov ecx, dword [ebx + 0x5c3c04]
push eax
push ecx
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x28]
call fcn.004f9970
push eax
lea ecx, [esp + 0x28]
call fcn.004017d0
mov eax, dword [esp + 0x20]
add eax, 0x7550
push eax
lea ecx, [esp + 0x28]
push ecx
mov ecx, esi
call fcn.0050d080
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x30]
call fcn.00404e90
mov edx, dword [eax]
mov eax, dword [eax + 4]
push 0x7550
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
call fcn.0050cda0
mov ecx, dword [esp + 0xc]
push 0x82000205
push esi
call fcn.0050d760
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 2
mov ecx, edi
call fcn.0050b710
test eax, eax
jne case.default.0x50ecc3
mov ecx, edi
call fcn.0050d050
test eax, eax
je case.default.0x50ecc3
push 0x8c
call fcn.00519e50
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x84], 3
je 0x50f0a6
mov ecx, eax
call fcn.0052ac60
mov esi, eax
jmp 0x50f0a8
xor esi, esi
test esi, esi
mov dword [esp + 0x84], 0xffffffff
je case.default.0x50ecc3
push edi
mov ecx, esi
call fcn.0052b520
test eax, eax
je 0x50f0e8
push 0x82000206
push esi
mov ecx, ebx
call fcn.0050d760
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0
mov ecx, edi
call fcn.0050c1f0
cmp eax, 0x10
jl case.default.0x50ecc3
push 0x74
call fcn.00519e50
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x84], 4
je 0x50f13b
mov ecx, eax
call fcn.0052aca0
mov esi, eax
jmp 0x50f13d
xor esi, esi
test esi, esi
mov dword [esp + 0x84], 0xffffffff
je case.default.0x50ecc3
push edi
mov ecx, esi
call fcn.0052b390
test eax, eax
je 0x50f179
push 0x82000207
mov ecx, ebx
push esi
call fcn.0050d760
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, esi
mov edx, dword [esi]
push 1
call dword [edx + 4]
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8