Function at 0x504900
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x504f20
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], ecx
push 0
call fcn.0054c464
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x7922e0
mov dword [eax + 0xc4], 0x7922c0
mov dword [eax + 0xc8], 0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
add ecx, 0x130
call fcn.0054beb8
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x24]
add ecx, 0xf5088
call fcn.0054beb8
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x24]
add eax, 0xf5090
push sub.MFC42.DLL_CString::CString
push fcn.0054beb8
push 0xa
push 4
push eax
call fcn.0054bb0c
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x24]
add ecx, 0xf5138
call fcn.0054beb8
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x24]
add ecx, 0xf5154
call fcn.0054beb8
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x24]
add ecx, 0xf5174
call fcn.0054beb8
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x24]
add ecx, 0xf5184
call fcn.0054beb8
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x24]
xor eax, eax
mov dword [edx + 0xf51c4], 0x7923a0
mov dword [edx + 0xf51d0], eax
mov dword [edx + 0xf51d4], eax
mov dword [edx + 0xf51cc], eax
mov dword [edx + 0xf51c8], eax
mov dword [edx + 0xf51d8], eax
mov dword [edx + 0xf51dc], 0xa
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x24]
add ecx, 0xf51e4
call fcn.004c3500
mov dword [ebp - 4], 0xa
mov ecx, dword [ebp - 0x24]
add ecx, 0xf52ac
call fcn.0054beb8
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x24]
add ecx, 0xf52b0
call fcn.0054beb8
mov dword [ebp - 4], 0xc
mov ecx, dword [ebp - 0x24]
add ecx, 0xf52b4
call fcn.0054beb8
mov dword [ebp - 4], 0xd
mov ecx, dword [ebp - 0x24]
add ecx, 0xf52b8
call fcn.0054beb8
mov dword [ebp - 4], 0xe
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, 1
mov byte [ecx + 0xd4], dl
mov byte [ecx + 0xd5], dl
mov byte [ecx + 0xd6], dl
mov dword [ecx + 0xd8], edx
mov dword [ecx + 0xdc], edx
mov dword [ecx + 0xe0], edx
mov dword [ecx + 0xe4], edx
mov dword [ecx + 0xe8], edx
mov dword [ecx + 0xec], edx
mov dword [ecx + 0xf0], edx
mov dword [ecx + 0xf4], edx
mov dword [ecx + 0xf8], edx
mov dword [ecx + 0xfc], edx
mov dword [ecx + 0x100], edx
mov byte [ecx + 0x104], dl
mov dword [ecx + 0x110], edx
mov dword [ecx + 0x114], edx
mov dword [ecx + 0x108], edx
mov dword [ecx + 0x10c], edx
mov dword [ecx + 0x118], edx
mov byte [ecx + 0x11c], dl
mov byte [ecx + 0x11d], dl
mov dword [ecx + 0x120], eax
mov dword [ecx + 0x124], eax
mov dword [ecx + 0x128], edx
mov byte [ecx + 0x12c], dl
mov dword [ecx + 0x134], edx
mov byte [ecx + 0xf5078], al
mov dword [ecx + 0xf507c], edx
mov dword [ecx + 0xcc], edx
mov dword [ecx + 0xd0], edx
mov dword [ecx + 0xf5080], edx
mov byte [ecx + 0xf5084], dl
mov byte [ecx + 0xf5085], dl
mov byte [ecx + 0xf5086], dl
mov byte [ecx + 0xf508c], al
mov byte [ecx + 0xf508d], dl
mov byte [ecx + 0xf50b8], dl
mov byte [ecx + 0xf50b9], dl
mov dword [ecx + 0xf50bc], edx
mov byte [ecx + 0xf50c0], dl
mov byte [ecx + 0xf50c1], al
mov dword [ecx + 0xf50c4], edx
mov dword [ecx + 0xf50c8], 0x10000
mov byte [ecx + 0xf50cc], dl
mov dword [ecx + 0xf50d0], edx
mov dword [ecx + 0xf50d4], edx
mov dword [ecx + 0xf50d8], edx
mov dword [ecx + 0xf50dc], edx
mov dword [ecx + 0xf50e0], edx
mov dword [ecx + 0xf50e4], edx
mov byte [ecx + 0xf50e8], dl
mov dword [ecx + 0xf50ec], edx
mov dword [ecx + 0xf50f0], edx
mov byte [ecx + 0xf50f4], al
mov byte [ecx + 0xf50f5], dl
mov dword [ecx + 0xf50f8], edx
mov dword [ecx + 0xf50fc], edx
mov dword [ecx + 0xf5100], edx
mov byte [ecx + 0xf5104], dl
mov byte [ecx + 0xf5105], dl
mov byte [ecx + 0xf5106], dl
mov dword [ecx + 0xf5118], edx
mov dword [ecx + 0xf511c], eax
mov byte [ecx + 0xf5120], dl
mov byte [ecx + 0xf5121], dl
mov byte [ecx + 0xf5122], dl
mov byte [ecx + 0xf5123], dl
mov byte [ecx + 0xf5124], dl
mov dword [ecx + 0xf5128], edx
mov dword [ecx + 0xf512c], edx
mov dword [ecx + 0xf5130], edx
mov dword [ecx + 0xf5134], edx
add ecx, 0xf5138
push 0x76acc0
call fcn.0054bebe
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov byte [ecx + 0xf513c], al
mov dword [ecx + 0xf5140], eax
mov byte [0x569f00], al
mov byte [ecx + 0xf5144], 1
mov byte [ecx + 0xf5145], al
mov byte [ecx + 0xf5146], al
mov byte [ecx + 0xf5147], al
mov dword [ecx + 0xf5148], 2
mov byte [ecx + 0xf514c], al
mov dword [ecx + 0xf5150], eax
mov dword [ecx + 0xf5158], eax
add ecx, 0xf5154
push 0x76acc0
call fcn.0054bebe
mov esi, dword [ebp - 0x24]
xor eax, eax
mov edi, 0x7ff
mov dword [esi + 0xf515c], eax
xor edx, edx
mov dword [esi + 0xf5160], eax
and edx, 0xff
mov ecx, edx
mov dword [esi + 0xf5164], eax
shl ecx, 8
or edx, ecx
mov dword [esi + 0xf5168], eax
mov ebx, edx
shl ebx, 0x10
mov byte [esi + 0xf516c], al
or edx, ebx
mov byte [esi + 0xf516d], al
mov byte [esi + 0xf516e], al
mov dword [esi + 0xf5170], eax
mov dword [esi + 0xf5178], eax
mov byte [esi + 0xf517c], al
mov dword [esi + 0xf5180], eax
mov dword [esi + 0xf5188], eax
mov byte [esi + 0xf518c], al
mov byte [esi + 0xf518d], al
mov byte [esi + 0xf518e], al
mov dword [esi + 0xf5190], eax
mov dword [esi + 0xf5194], eax
mov dword [esi + 0xf5198], eax
mov dword [esi + 0xf519c], eax
mov dword [esi + 0xf51a0], eax
mov dword [esi + 0xf51a4], edi
mov dword [esi + 0xf51a8], edi
mov dword [esi + 0xf51ac], eax
mov byte [esi + 0xf51b0], al
mov dword [esi + 0xf51b4], eax
mov byte [esi + 0xf51b8], al
mov dword [esi + 0xf51bc], eax
mov dword [esi + 0xf51c0], eax
mov dword [esi + 0xf51e0], eax
mov dword [0x574e00], eax
add esi, 0xf5274
mov dword [esi], edx
mov dword [esi + 4], edx
mov dword [esi + 8], edx
mov dword [esi + 0xc], edx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], edx
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], edx
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], edx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edx
mov dword [esi + 0x30], edx
mov dword [esi + 0x34], edx
mov edi, dword [ebp - 0x24]
xor esi, esi
mov dword [edi + 0xf5250], 0
mov eax, 0x7fff
mov edx, 0x56b5
mov ecx, 0x318c
mov word [esi*2 + 0x5d5b60], ax
xor ebx, ebx
mov word [esi*2 + 0x5d5b62], dx
mov word [esi*2 + 0x5d5b64], cx
mov word [esi*2 + 0x5d5b66], bx
add esi, 4
cmp esi, 0x18
jl 0x504de4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret