Function at 0x4dbf5c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call sub.rtl140.bpl__System__IntfAddRef_qqrx45System__DelphiInterface_t17System_IInterface_
xor eax, eax
push ebp
push 0x4dc28f
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea ecx, [ebp - 0xc]
mov edx, dword [ebx + 0x18]
mov eax, 0x4dc2ac
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0xc]
lea eax, [ebx + 0x18]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
push ebp
mov eax, dword [ebx + 0x28]
mov edx, dword [eax + 4]
mov eax, 0x4dc2c4
call fcn.004dbd60
pop ecx
mov esi, dword [ebx + 0x28]
mov dword [esi + 4], eax
push ebp
mov edx, dword [esi + 8]
mov eax, 0x4dc2f0
call fcn.004dbd60
pop ecx
mov edi, dword [ebx + 0x28]
mov dword [edi + 8], eax
push ebp
mov edx, dword [edi + 0xc]
mov eax, 0x4dc31c
call fcn.004dbd60
pop ecx
mov esi, dword [ebx + 0x28]
mov dword [esi + 0xc], eax
push ebp
mov edx, dword [esi + 0x10]
mov eax, 0x4dc34c
call fcn.004dbd60
pop ecx
mov edx, dword [ebx + 0x28]
mov dword [edx + 0x10], eax
push ebp
lea ecx, [ebp - 0x10]
mov edx, dword [ebx + 0x30]
mov eax, 0x4dc37c
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0x10]
lea eax, [ebx + 0x30]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
push ebp
lea ecx, [ebp - 0x14]
mov edx, dword [ebx + 0x34]
mov eax, 0x4dc39c
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0x14]
lea eax, [ebx + 0x34]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
push ebp
lea ecx, [ebp - 0x18]
mov edx, dword [ebx + 0x38]
mov eax, 0x4dc3c8
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0x18]
lea eax, [ebx + 0x38]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
push ebp
lea ecx, [ebp - 0x1c]
mov edx, dword [ebx + 0x3c]
mov eax, 0x4dc3f0
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0x1c]
lea eax, [ebx + 0x3c]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
mov ecx, dword [ebp - 4]
mov edx, dword [ebx + 0x40]
mov eax, 0x4dc408
call fcn.004d995c
mov ecx, dword [ebp - 4]
mov edx, dword [ebx + 0x44]
mov eax, 0x4dc420
call fcn.004d995c
mov ecx, dword [ebp - 4]
mov edx, dword [ebx + 0x48]
mov eax, 0x4dc444
call fcn.004d995c
push ebp
mov eax, dword [ebx + 0x4c]
movzx edx, byte [eax + 4]
mov eax, 0x4dc464
call fcn.004dbd60
pop ecx
mov esi, dword [ebx + 0x4c]
mov byte [esi + 4], al
push ebp
movzx edx, byte [esi + 5]
mov eax, 0x4dc494
call fcn.004dbd60
pop ecx
mov edi, dword [ebx + 0x4c]
mov byte [edi + 5], al
push ebp
movzx edx, byte [edi + 6]
mov eax, 0x4dc4c4
call fcn.004dbebc
pop ecx
mov edx, dword [ebx + 0x4c]
mov byte [edx + 6], al
movzx eax, byte [0x4dc4ec]
mov byte [ebx + 0x52], al
push ebp
xor edx, edx
mov eax, 0x4dc4fc
call fcn.004dbebc
pop ecx
test al, al
je 0x4dc104
or byte [ebx + 0x52], 1
push ebp
xor edx, edx
mov eax, 0x4dc520
call fcn.004dbebc
pop ecx
test al, al
je 0x4dc11a
or byte [ebx + 0x52], 4
push ebp
xor edx, edx
mov eax, 0x4dc548
call fcn.004dbebc
pop ecx
test al, al
je 0x4dc130
or byte [ebx + 0x52], 2
push ebp
xor edx, edx
mov eax, 0x4dc56c
call fcn.004dbebc
pop ecx
test al, al
je 0x4dc146
or byte [ebx + 0x52], 8
push ebp
xor edx, edx
mov eax, 0x4dc594
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x50], al
push ebp
mov edx, dword [ebx + 0x54]
mov eax, 0x4dc5b4
call fcn.004dbd60
pop ecx
mov dword [ebx + 0x54], eax
push ebp
mov edx, dword [ebx + 0x58]
mov eax, 0x4dc5dc
call fcn.004dbd60
pop ecx
mov dword [ebx + 0x58], eax
push ebp
mov edx, dword [ebx + 0x20]
mov eax, 0x4dc604
call fcn.004dbd60
pop ecx
mov dword [ebx + 0x20], eax
push ebp
movzx edx, byte [ebx + 0x5c]
mov eax, 0x4dc624
call fcn.004dbd60
pop ecx
mov byte [ebx + 0x5c], al
push ebp
movzx edx, byte [ebx + 0x65]
mov eax, 0x4dc648
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x65], al
push ebp
movzx edx, byte [ebx + 0x66]
mov eax, 0x4dc664
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x66], al
push ebp
movzx edx, byte [ebx + 0x67]
mov eax, 0x4dc684
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x67], al
push ebp
movzx edx, byte [ebx + 0x68]
mov eax, 0x4dc6a0
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x68], al
push ebp
movzx edx, byte [ebx + 0x69]
mov eax, 0x4dc6c8
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x69], al
push ebp
movzx edx, byte [ebx + 0x6a]
mov eax, 0x4dc6ec
call fcn.004dbebc
pop ecx
mov byte [ebx + 0x6a], al
push ebp
movzx edx, byte [ebx + 0x64]
mov eax, 0x4dc710
call fcn.004dbd60
pop ecx
mov byte [ebx + 0x64], al
push ebp
lea ecx, [ebp - 0x20]
mov edx, dword [ebx + 0x6c]
mov eax, 0x4dc738
call fcn.004dbe00
pop ecx
mov edx, dword [ebp - 0x20]
lea eax, [ebx + 0x6c]
call sub.rtl140.bpl__System__UStrAsg_qqrr20System_UnicodeStringx20System_UnicodeString
lea ecx, [ebp - 8]
mov edx, 0x4dc750
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x24]
push 0
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x70]
call fcn.0057c548
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4dc296
lea eax, [ebp - 0x20]
mov edx, 6
call sub.rtl140.bpl__System__UStrArrayClr_qqrpvi
lea eax, [ebp - 8]
mov edx, dword [0x422d44]
mov ecx, 2
call sub.rtl140.bpl__System__FinalizeArray_qqrpvt1ui
ret