Function at 0x4edd50
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4ee052
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4ee068
call fcn.004048c4
push 0
mov ecx, 0x4ee078
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4ee08c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4ee0a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4ee0b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4ee0cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov esi, dword [ebx + 0xf4]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4ee0dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004ec8f4
push 0
mov ecx, 0x4ee0ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov esi, dword [ebx + 0xf4]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4ee0fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004ec8f4
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4ee110
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xf4]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004ec8f4
push 0xffffffffffffffff
mov ecx, 0x4ee124
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4ee13c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4ee154
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4ee16c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4ee188
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d427c
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ee1a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
cmp dword [ebp - 8], 0
je 0x4edf3c
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x54], 1
jmp 0x4edf46
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ee1bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
cmp dword [ebp - 8], 0
je 0x4edf6e
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x55], 1
jmp 0x4edf78
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4ee1d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
cmp dword [ebp - 8], 0
je 0x4edfa0
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x56], 1
jmp 0x4edfaa
mov eax, dword [ebx + 0xf4]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4ee1a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.004ee8c8
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ee1bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.004ee8c8
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4ee1d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004d414c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.004ee8c8
mov edx, dword [ebx + 0xf4]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ee059
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404850
ret