Function at 0x4dee70
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
xor eax, eax
push ebp
push 0x4df568
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [0x4e9efc]
mov eax, dword [eax]
call fcn.0047e440
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00409a88
push dword [ebp - 0x10]
push 0x4df580
mov eax, dword [0x4e9940]
push dword [eax]
push 0x4df58c
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404c54
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x438c7c]
call fcn.00438d2c
mov esi, eax
push 1
mov ecx, 0x4df59c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x35], bl
push 1
mov ecx, 0x4df5c0
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x3a], bl
push 1
mov ecx, 0x4df5d4
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x38c]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x39], bl
push 1
mov ecx, 0x4df5e8
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x37c]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x36], bl
push 1
mov ecx, 0x4df5fc
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x388]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x38], bl
push 1
mov ecx, 0x4df614
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x374]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x34], bl
push 1
mov ecx, 0x4df628
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax], bl
push 1
mov ecx, 0x4df638
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x2c], bl
push 1
mov ecx, 0x4df64c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 1], bl
push 1
mov ecx, 0x4df660
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 2], bl
push 1
mov ecx, 0x4df674
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 3], bl
push 1
mov ecx, 0x4df688
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x30c]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 4], bl
push 1
mov ecx, 0x4df69c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x328]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 5], bl
push 1
mov ecx, 0x4df6b0
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 6], bl
push 1
mov ecx, 0x4df6c8
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x354]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 7], bl
push 1
mov ecx, 0x4df6e0
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x344]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 8], bl
push 1
mov ecx, 0x4df6f8
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov ebx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x350]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov eax, dword [0x4ea074]
mov byte [eax + 0x37], bl
push 0x4df70c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df718
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x10], eax
push 0x4df72c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df73c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x338]
mov edx, dword [ebp - 8]
call fcn.0045df00
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0xc], eax
push 0x4df70c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df74c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x340]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x14], eax
push 0x4df70c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df75c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x380]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x1c], eax
push 0x4df70c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df76c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x370]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x30], eax
push 0x4df70c
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df780
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x358]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x18], eax
push 0x4df790
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df79c
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x34c]
mov edx, dword [ebp - 8]
call fcn.0045df00
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x20], eax
push 0x4df7b0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df7bc
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x320]
mov edx, dword [ebp - 8]
call fcn.0045df00
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x24], eax
push 0x4df7d0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df7e0
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 8]
call fcn.0045df00
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x28], eax
push 0x4df7f4
lea eax, [ebp - 8]
push eax
mov ecx, 0x4df800
mov edx, 0x4df5b0
mov eax, esi
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, dword [0x4ea074]
mov dword [edx + 0x74], eax
mov eax, dword [ebp - 8]
call fcn.00409614
mov edx, eax
mov eax, dword [0x4ea0ec]
mov eax, dword [eax]
mov eax, dword [eax + 0x330]
call fcn.00444d50
mov eax, dword [ebp - 8]
call fcn.00409614
push eax
push 0
call sub.user32.dll_UnregisterHotKey
mov eax, dword [ebp - 8]
call fcn.00409614
push eax
push 0
push 0
mov eax, dword [0x4e9e68]
mov eax, dword [eax]
call fcn.004646f0
push eax
call sub.user32.dll_RegisterHotKey
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4df540
lea eax, [ebp - 0xc]
mov edx, 0x4df810
call fcn.0040496c
jmp 0x4df54d
lea eax, [ebp - 0xc]
mov edx, 0x4df83c
call fcn.0040496c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4df56f
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.004048f8
ret