Function at 0x10edb90
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0xe390e0], esi
test esi, esi
je 0x10eddc3
call fcn.010edaf0
mov ecx, dword [0xe38a04]
push ecx
push esi
mov dword [fcn.00e39010], eax
call eax
mov edx, dword [0xe38dc8]
mov dword [fcn.00e38f30], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38e44]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [fcn.00e3909c], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [0xe38f20], eax
mov eax, dword [0xe38a64]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe38a50]
mov dword [0xe3908c], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38af8]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [0xe38f4c], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [0xe38f2c], eax
mov eax, dword [0xe38cd4]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe38b3c]
mov dword [0xe390e4], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38da0]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [0xe390d0], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [0xe38f90], eax
mov eax, dword [0xe38d48]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe38bbc]
mov dword [fcn.00e38fa0], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38ae8]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [0xe39054], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [fcn.00e39088], eax
mov eax, dword [0xe38e0c]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe388b0]
mov dword [fcn.00e3907c], eax
push edx
mov eax, dword [0xe390e0]
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38d98]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [fcn.00e39134], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [fcn.00e390f4], eax
mov eax, dword [0xe38a24]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe38c18]
mov dword [fcn.00e3910c], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38e34]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [fcn.00e38fac], eax
call dword [fcn.00e39010]
mov ecx, dword [0xe390e0]
mov dword [0xe3901c], eax
mov eax, dword [0xe388bc]
push eax
push ecx
call dword [fcn.00e39010]
mov edx, dword [0xe3892c]
mov dword [0xe3913c], eax
mov eax, dword [0xe390e0]
push edx
push eax
call dword [fcn.00e39010]
mov ecx, dword [0xe38ab0]
mov edx, dword [0xe390e0]
push ecx
push edx
mov dword [0xe39044], eax
call dword [fcn.00e39010]
mov dword [0xe3904c], eax
mov eax, dword [0xe38d50]
push eax
call dword [fcn.00e38f30]
mov ecx, dword [0xe3897c]
push ecx
mov dword [0xe38ef8], eax
call dword [fcn.00e38f30]
mov edx, dword [0xe38904]
push edx
mov dword [0xe39020], eax
call dword [fcn.00e38f30]
mov dword [0xe39114], eax
mov eax, dword [0xe389dc]
push eax
call dword [fcn.00e38f30]
mov ecx, dword [0xe38b28]
push ecx
mov dword [0xe38fd4], eax
call dword [fcn.00e38f30]
mov dword [0xe39004], eax
mov eax, dword [0xe38ef8]
pop esi
test eax, eax
je 0x10ede38
mov edx, dword [0xe38cac]
push edx
push eax
call dword [fcn.00e39010]
mov dword [fcn.00e38fe0], eax
mov eax, dword [0xe39020]
test eax, eax
je 0x10ede6c
mov ecx, dword [0xe38c24]
push ecx
push eax
call dword [fcn.00e39010]
mov edx, dword [0xe389cc]
mov dword [fcn.00e3905c], eax
mov eax, dword [0xe39020]
push edx
push eax
call dword [fcn.00e39010]
mov dword [fcn.00e39000], eax
mov eax, dword [0xe39114]
test eax, eax
je 0x10ede88
mov ecx, dword [0xe38b94]
push ecx
push eax
call dword [fcn.00e39010]
mov dword [fcn.00e390a0], eax
mov eax, dword [0xe38fd4]
test eax, eax
je 0x10edea4
mov edx, dword [0xe38928]
push edx
push eax
call dword [fcn.00e39010]
mov dword [fcn.00e39068], eax
mov eax, dword [0xe39004]
test eax, eax
je 0x10eded7
mov ecx, dword [0xe38c14]
push ecx
push eax
call dword [fcn.00e39010]
mov edx, dword [0xe39004]
push 0xc3529c
push edx
mov dword [0xe390d4], eax
call dword [fcn.00e39010]
mov dword [0xe38f24], eax
mov esp, ebp
pop ebp
ret