Function at 0x502300
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5cd04c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x10], ebp
mov dword [ebp + 4], ebx
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp + 8], ebx
sub esp, 0x40
mov dword [esp + 0x60], ebx
mov esi, esp
mov dword [esp + 0x54], esp
push 0x6366c8
mov ecx, esi
mov dword [ebp], 0x5e92ec
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x6366bc
lea ecx, [esi + 4]
mov byte [esp + 0x64], 1
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 2
call fcn.00593749
mov edi, 1
mov dword [esi + 0x20], 0xd0e56042
mov dword [esi + 0x28], 0xf1a9fbe7
mov dword [esi + 0x30], 0x20c49ba6
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x2c
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x407be722
mov dword [esi + 0x2c], 0x40624dd2
mov dword [esi + 0x34], 0x401372b0
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x6366b0
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x6366a4
lea ecx, [esi + 4]
mov byte [esp + 0x64], 3
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 4
call fcn.00593749
mov dword [esi + 0x20], 0x374bc6a8
mov dword [esi + 0x28], 0xf1a9fbe7
mov dword [esi + 0x30], 0x20c49ba6
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x28
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x406c5989
mov dword [esi + 0x2c], 0x40524dd2
mov dword [esi + 0x34], 0x401372b0
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov dword [esp + 0x54], esp
mov esi, esp
push 0x6366a0
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x636694
lea ecx, [esi + 4]
mov byte [esp + 0x64], 5
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 6
call fcn.00593749
mov dword [esi + 0x20], 0x1eb851ec
mov dword [esi + 0x28], 0x147ae148
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x3c
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x407ac385
mov dword [esi + 0x2c], 0x406147ae
mov dword [esi + 0x34], 0x40220000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636690
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x636684
lea ecx, [esi + 4]
mov byte [esp + 0x64], 7
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 8
call fcn.00593749
mov dword [esi + 0x20], 0x6e978d50
mov dword [esi + 0x28], 0x9374bc6a
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x38
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x40715b12
mov dword [esi + 0x2c], 0x40560418
mov dword [esi + 0x34], 0x40220000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636680
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x636674
lea ecx, [esi + 4]
mov byte [esp + 0x64], 9
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0xa
call fcn.00593749
mov dword [esi + 0xc], 0x4c
mov dword [esi + 0x10], edi
mov dword [esi + 0x20], 0x33333333
mov dword [esi + 0x28], 0x9999999a
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0x14], 2
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x40906933
mov dword [esi + 0x2c], 0x40759999
mov dword [esi + 0x34], 0x40220000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636670
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.004ca779
push 0x636664
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0xb
call fcn.00593749
push 0x63665c
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0xc
call fcn.00593749
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 8
mov dword [esi + 0x10], 2
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0xf0
mov dword [esi + 0x24], 0x4062c000
mov dword [esi + 0x2c], 0x40560000
mov dword [esi + 0x34], 0x40220000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636658
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x63664c
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0xd
call fcn.00593749
push 0x63665c
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0xe
call fcn.00593749
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0xc
mov dword [esi + 0x10], 3
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0xf0
mov dword [esi + 0x24], 0x4072c000
mov dword [esi + 0x2c], 0x40614000
mov dword [esi + 0x34], 0x40220000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
mov dword [esp + 0x54], esi
push 0x636644
mov ecx, esi
call fcn.00593749
push 0x636644
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0xf
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0x10
call fcn.00593749
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x2923
mov dword [esi + 0x10], 8
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x408c3000
mov dword [esi + 0x2c], 0x406be000
mov dword [esi + 0x34], 0x40240000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x62d21c
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x63663c
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0x11
call fcn.00593749
push 0x6366b4
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0x12
call fcn.00593749
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x30], ebx
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0x7c
mov dword [esi + 0x10], 5
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0x100
mov dword [esi + 0x24], 0x40813000
mov dword [esi + 0x2c], 0x40809000
mov dword [esi + 0x34], 0x40340000
mov dword [esi + 0x38], edi
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636638
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x636628
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0x13
call fcn.00593749
push 0x636620
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0x14
call fcn.00593749
mov dword [esi + 0xc], 2
mov dword [esi + 0x10], 6
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 0xa0
mov eax, 0x9999999a
mov dword [esi + 0x28], ebx
mov dword [esi + 0x20], eax
mov dword [esi + 0x30], eax
mov ecx, 0x709ed8
mov dword [esi + 0x1c], 0x78
mov dword [esi + 0x24], 0x4050b999
mov dword [esi + 0x2c], 0x404d8000
mov dword [esi + 0x34], 0x401f9999
mov dword [esi + 0x38], ebx
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636618
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x636608
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0x15
call fcn.00593749
push 0x636620
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0x16
call fcn.00593749
mov eax, 6
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], 0x66666666
mov dword [esi + 0x30], 0x9999999a
mov ecx, 0x709ed8
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 0xa0
mov dword [esi + 0x1c], 0x78
mov dword [esi + 0x24], 0x40590000
mov dword [esi + 0x2c], 0x40570666
mov dword [esi + 0x34], 0x401f9999
mov dword [esi + 0x38], ebx
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov esi, esp
mov dword [esp + 0x54], esp
push 0x636600
mov ecx, esi
mov dword [esp + 0x58], esi
call fcn.00593749
push 0x6365f0
lea ecx, [esi + 4]
mov byte [esp + 0x64], 0x17
call fcn.00593749
push 0x63665c
lea ecx, [esi + 8]
mov byte [esp + 0x64], 0x18
call fcn.00593749
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], 0x66666666
mov dword [esi + 0x30], 0x9999999a
mov ecx, 0x709ed8
mov dword [esi + 0xc], 0xa
mov dword [esi + 0x10], 6
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 0x140
mov dword [esi + 0x1c], 0xf0
mov dword [esi + 0x24], 0x40590000
mov dword [esi + 0x2c], 0x40570666
mov dword [esi + 0x34], 0x401f9999
mov dword [esi + 0x38], ebx
mov byte [esp + 0x60], bl
call fcn.00502bd0
sub esp, 0x40
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
push 0x401f9999
push 0x9999999a
push 0x4061c333
push 0x33333333
push 0x4062c000
push ebx
push 0xf0
push 0x140
push edi
push 6
push 0xe
push 0x63665c
push 0x6365e0
push 0x6365d8
call fcn.00502af0
mov ecx, 0x709ed8
call fcn.00502bd0
sub esp, 0x40
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
push 0x40220000
push ebx
push 0x40640000
push ebx
push 0x40652000
push ebx
push 0x100
push 0x140
push ebx
push 6
push 0x7e
push 0x6366b4
push 0x6365d0
push 0x6365c8
call fcn.00502af0
mov ecx, 0x709ed8
call fcn.00502bd0
sub esp, 0x40
mov ecx, esp
mov dword [esp + 0x54], esp
push ebx
push ebx
push ebx
push 0x408f4000
push ebx
push 0x408f4000
push ebx
push 0x100
push 0x140
push ebx
push 7
push 0xffffffffffffffff
push 0x63665c
push 0x6365bc
push 0x6365b8
call fcn.00502af0
mov ecx, 0x709ed8
call fcn.00502bd0
mov ecx, dword [esp + 0x18]
pop edi
mov eax, ebp
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret