Function at 0x14000dd40
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x120
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x120], rbx
lea rcx, [rbp]
mov qword [rbp + 0x128], rsi
xor edx, edx
mov qword [rbp + 0x130], rdi
mov r8d, 0x100
mov qword [rbp + 0x138], r12
call sub.VCRUNTIME140.dll_memset
movzx eax, word [0x1401037cc]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14000dd99
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400caa90
sub rsp, rcx
xor r15d, r15d
cmp r15w, word [0x1401037cc]
mov r14d, r15d
lea r12, [rsp + 0x20]
jae 0x14000de89
mov rdi, r12
mov esi, r15d
nop word [rax + rax]
cmp byte [0x140102893], r15b
mov rax, qword [0x1401037b8]
mov rbx, qword [rsi + rax]
je 0x14000ddf0
mov rcx, rbx
call fcn.140007b40
test al, al
je 0x14000de37
cmp word [rbx + 6], r15w
je 0x14000de1f
cmp byte [rbx + 0x19], r15b
je 0x14000de37
mov byte [rdi], r15b
movzx eax, byte [rbx + 0x12]
cmp byte [rbx + 0x14], r15b
je 0x14000e070
test al, al
jne 0x14000e078
mov byte [rbx + 0x12], 1
jmp 0x14000e078
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x14000de37
cmp byte [rax + 0x28], r15b
jne 0x14000ddfd
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x14000de28
mov byte [rdi], 1
cmp byte [rbx + 0x18], r15b
je 0x14000de6f
movzx edx, word [rbx + 4]
mov rcx, qword [0x140102790]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rbx + 0x18], al
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x14000de6f
mov byte [rax + 0x27], r15b
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x14000de62
movzx eax, word [0x1401037cc]
inc r14d
add rsi, 8
inc rdi
cmp r14d, eax
jl 0x14000ddd0
movzx ecx, word [0x1401037cc]
mov ebx, r15d
test ecx, ecx
je 0x14000df94
mov rdi, r15
mov r11, r12
cmp byte [r11], r15b
jne 0x14000df7c
mov rax, qword [0x1401037b8]
mov rdx, qword [rdi + rax]
cmp byte [rdx + 0x16], r15b
je 0x14000df0a
cmp byte [rdx + 0x10], r15b
je 0x14000df0a
mov r8d, r15d
test ecx, ecx
je 0x14000df0a
mov r9, r15
nop dword [rax + rax]
mov rax, qword [0x1401037b8]
mov rcx, qword [r9 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [rcx + 0x10], al
jne 0x14000def7
cmp byte [rcx + 0x12], r15b
jne 0x14000def7
movzx eax, byte [rdx + 0xf]
cmp byte [rcx + 0xf], al
jne 0x14000def7
mov byte [rcx + 0x12], 1
movzx eax, word [0x1401037cc]
inc r8d
add r9, 8
cmp r8d, eax
jl 0x14000ded0
cmp byte [rdx + 0x15], r15b
je 0x14000df7c
cmp byte [rdx + 0x10], r15b
je 0x14000df7c
cmp byte [rdx + 0xe], r15b
jne 0x14000df7c
cmp word [rdx + 0xa], r15w
jne 0x14000df7c
cmp byte [rdx + 0x11], r15b
jne 0x14000df7c
cmp r15w, word [0x1401037cc]
mov r9d, r15d
jae 0x14000df7c
mov r10, r15
nop dword [rax]
mov rax, qword [0x1401037b8]
mov r8, qword [r10 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [r8 + 0x10], al
jne 0x14000df69
cmp byte [r8 + 0x12], r15b
jne 0x14000df69
mov eax, dword [rdx]
and eax, dword [r8]
cmp eax, dword [rdx]
jne 0x14000df69
mov byte [r8 + 0x12], 1
movzx eax, word [0x1401037cc]
inc r9d
add r10, 8
cmp r9d, eax
jl 0x14000df40
movzx ecx, word [0x1401037cc]
inc ebx
inc r11
add rdi, 8
cmp ebx, ecx
jl 0x14000dea1
cmp qword [0x140102778], r15
setne byte [0x1401028b3]
cmp r15w, word [0x1401037cc]
jae 0x14000e1f6
mov rsi, r15
cmp byte [r12], 0
jne 0x14000e1dc
mov rax, qword [0x1401037b8]
mov rdi, qword [rsi + rax]
movzx ecx, byte [rdi + 0x12]
test cl, cl
jne 0x14000e0bb
movzx eax, byte [rdi + 0x10]
mov cl, 1
mov byte [rdi + 0x12], 1
cmp byte [rbp + rax], 0
jne 0x14000e0bb
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x14000e0bb
nop word [rax + rax]
cmp qword [rbx + 8], 0
jne 0x14000e0aa
cmp byte [rbx + 0x28], 0
je 0x14000e0aa
cmp byte [0x140102893], 0
je 0x14000e068
mov r9, qword [rbx]
mov rcx, r9
call fcn.14009e100
test eax, eax
je 0x14000e032
sub eax, 1
jne 0x14000e0aa
mov rcx, qword [r9 + 0x10]
test rcx, rcx
je 0x14000e0aa
cmp byte [rcx], 0xcd
jne 0x14000e0aa
movzx eax, byte [rcx + 1]
test al, al
je 0x14000e068
mov rcx, qword [rcx + 8]
movzx eax, byte [rcx]
test al, al
jne 0x14000e091
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000e062
cmp qword [rax], 0
jne 0x14000e068
cmp byte [rcx + 1], 0
je 0x14000e095
mov byte [rdi + 0x12], 0
xor cl, cl
jmp 0x14000e0bb
cmp al, 1
jne 0x14000e078
mov byte [rbx + 0x12], r15b
movzx eax, byte [rbx + 0x11]
test al, al
je 0x14000de6f
movzx eax, al
mov byte [rbp + rax], 1
jmp 0x14000de6f
cmp al, 1
je 0x14000e068
mov rcx, qword [rcx + 8]
lea rdx, [0x1400e1d24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000e068
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x14000e000
movzx ecx, byte [rdi + 0x12]
cmp cl, 2
jne 0x14000e12d
cmp word [rdi + 0xa], 0
jne 0x14000e127
cmp word [rdi + 8], 0
jne 0x14000e127
cmp word [rdi + 6], 0
jne 0x14000e127
movzx eax, byte [rdi + 0xf]
test al, 0xc0
je 0x14000e0e1
test al, 0xc
je 0x14000e127
movzx ecx, byte [rdi + 0x10]
test cl, cl
je 0x14000e0fd
lea eax, [rcx - 1]
cmp al, 5
ja 0x14000e0f5
cmp cl, 3
jne 0x14000e0fd
add cl, 0x66
cmp cl, 5
ja 0x14000e127
movzx edx, byte [rdi + 0x11]
mov cl, 2
test dl, dl
je 0x14000e12d
lea eax, [rdx - 1]
cmp al, 5
ja 0x14000e113
cmp dl, 3
jne 0x14000e11b
add dl, 0x66
cmp dl, 5
ja 0x14000e11f
mov al, 1
jmp 0x14000e121
xor al, al
mov cl, 2
test al, al
jne 0x14000e12d
mov byte [rdi + 0x12], 3
mov cl, 3
movzx eax, byte [rdi + 0x18]
test cl, cl
jne 0x14000e193
test al, al
jne 0x14000e1b0
movzx ecx, byte [rdi + 0x10]
mov r8d, dword [rdi]
cmp cl, 0x10
je 0x14000e168
cmp cl, 0x11
je 0x14000e162
cmp cl, 0x12
je 0x14000e15c
lea eax, [rcx - 0x5b]
cmp al, 1
ja 0x14000e16c
or r8d, 8
jmp 0x14000e16c
or r8d, 1
jmp 0x14000e16c
or r8d, 2
jmp 0x14000e16c
or r8d, 4
movzx edx, word [rdi + 4]
movzx r9d, cl
mov rcx, qword [0x140102790]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
setne cl
mov byte [rdi + 0x18], cl
test eax, eax
jne 0x14000e1b0
mov byte [rdi + 0x12], 1
jmp 0x14000e1b0
test al, al
je 0x14000e1b0
movzx edx, word [rdi + 4]
mov rcx, qword [0x140102790]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rdi + 0x18], al
movzx ecx, byte [rdi + 0x12]
sub ecx, 1
je 0x14000e1d5
sub ecx, 1
je 0x14000e1cc
sub ecx, 1
jne 0x14000e1dc
or byte [0x1401028b3], 3
jmp 0x14000e1dc
or byte [0x1401028b3], 2
jmp 0x14000e1dc
or byte [0x1401028b3], 1
movzx eax, word [0x1401037cc]
inc r15d
inc r12
add rsi, 8
cmp r15d, eax
jl 0x14000dfb3
mov eax, dword [0x1401037c4]
test eax, eax
jne 0x14000e21b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x14000e21b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x14000e21b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
je 0x14000e222
or byte [0x1401028b3], 1
cmp byte [0x1401027a3], 0
jne 0x14000e238
cmp byte [0x14010093c], 0
je 0x14000e23f
test eax, eax
je 0x14000e23f
or byte [0x1401028b3], 2
movzx edx, word [0x1401037cc]
call fcn.14000b980
cmp dword [0x1401037b4], 0
je 0x14000e27f
cmp byte [0x1401025e2], 0
jne 0x14000e27f
mov rcx, qword [0x140102790]
xor r9d, r9d
lea edx, [r9 + 9]
lea r8d, [r9 + 0xa]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x1401025e2]
mov rbx, qword [rbp + 0x120]
mov rsi, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop rbp
ret