Function at 0x140017930
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x120
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x120], rbx
lea rcx, [rbp]
mov qword [rbp + 0x128], rsi
xor edx, edx
mov qword [rbp + 0x130], rdi
mov r8d, 0x100
mov qword [rbp + 0x138], r12
call sub.VCRUNTIME140.dll_memset
movzx eax, word [0x140128a9c]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140017989
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400ed080
sub rsp, rcx
xor r15d, r15d
cmp r15w, word [0x140128a9c]
mov r14d, r15d
lea r12, [rsp + 0x20]
jae 0x140017a79
mov rdi, r12
mov esi, r15d
nop word [rax + rax]
cmp byte [0x140127b40], r15b
mov rax, qword [0x140128a88]
mov rbx, qword [rsi + rax]
je 0x1400179e0
mov rcx, rbx
call fcn.1400118c0
test al, al
je 0x140017a27
cmp word [rbx + 6], r15w
je 0x140017a0f
cmp byte [rbx + 0x19], r15b
je 0x140017a27
mov byte [rdi], r15b
movzx eax, byte [rbx + 0x12]
cmp byte [rbx + 0x14], r15b
je 0x140017c65
test al, al
jne 0x140017c6d
mov byte [rbx + 0x12], 1
jmp 0x140017c6d
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140017a27
cmp byte [rax + 0x28], r15b
jne 0x1400179ed
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140017a18
mov byte [rdi], 1
cmp byte [rbx + 0x18], r15b
je 0x140017a5f
movzx edx, word [rbx + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rbx + 0x18], al
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140017a5f
mov byte [rax + 0x27], r15b
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140017a52
movzx eax, word [0x140128a9c]
inc r14d
add rsi, 8
inc rdi
cmp r14d, eax
jl 0x1400179c0
movzx ecx, word [0x140128a9c]
mov ebx, r15d
test ecx, ecx
je 0x140017b84
mov rdi, r15
mov r11, r12
cmp byte [r11], r15b
jne 0x140017b6c
mov rax, qword [0x140128a88]
mov rdx, qword [rdi + rax]
cmp byte [rdx + 0x16], r15b
je 0x140017afa
cmp byte [rdx + 0x10], r15b
je 0x140017afa
mov r8d, r15d
test ecx, ecx
je 0x140017afa
mov r9, r15
nop dword [rax + rax]
mov rax, qword [0x140128a88]
mov rcx, qword [r9 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [rcx + 0x10], al
jne 0x140017ae7
cmp byte [rcx + 0x12], r15b
jne 0x140017ae7
movzx eax, byte [rdx + 0xf]
cmp byte [rcx + 0xf], al
jne 0x140017ae7
mov byte [rcx + 0x12], 1
movzx eax, word [0x140128a9c]
inc r8d
add r9, 8
cmp r8d, eax
jl 0x140017ac0
cmp byte [rdx + 0x15], r15b
je 0x140017b6c
cmp byte [rdx + 0x10], r15b
je 0x140017b6c
cmp byte [rdx + 0xe], r15b
jne 0x140017b6c
cmp word [rdx + 0xa], r15w
jne 0x140017b6c
cmp byte [rdx + 0x11], r15b
jne 0x140017b6c
cmp r15w, word [0x140128a9c]
mov r9d, r15d
jae 0x140017b6c
mov r10, r15
nop dword [rax]
mov rax, qword [0x140128a88]
mov r8, qword [r10 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [r8 + 0x10], al
jne 0x140017b59
cmp byte [r8 + 0x12], r15b
jne 0x140017b59
mov eax, dword [rdx]
and eax, dword [r8]
cmp eax, dword [rdx]
jne 0x140017b59
mov byte [r8 + 0x12], 1
movzx eax, word [0x140128a9c]
inc r9d
add r10, 8
cmp r9d, eax
jl 0x140017b30
movzx ecx, word [0x140128a9c]
inc ebx
inc r11
add rdi, 8
cmp ebx, ecx
jl 0x140017a91
cmp qword [0x140127a48], r15
setne byte [0x1401289d6]
cmp r15w, word [0x140128a9c]
jae 0x140017dfb
mov rsi, r15
cmp byte [r12], 0
jne 0x140017de1
mov rax, qword [0x140128a88]
mov rdi, qword [rsi + rax]
movzx ecx, byte [rdi + 0x12]
test cl, cl
jne 0x140017cad
movzx eax, byte [rdi + 0x10]
mov cl, 1
mov byte [rdi + 0x12], 1
cmp byte [rbp + rax], 0
jne 0x140017cad
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x140017cad
nop word [rax + rax]
cmp qword [rbx + 8], 0
jne 0x140017c9c
cmp byte [rbx + 0x28], 0
je 0x140017c9c
cmp byte [0x140127b40], 0
je 0x140017c58
mov r9, qword [rbx]
mov rcx, r9
call fcn.1400bcb20
test eax, eax
je 0x140017c22
cmp eax, 1
jne 0x140017c9c
mov rcx, qword [r9 + 0x10]
test rcx, rcx
je 0x140017c9c
cmp byte [rcx], 0xcd
jne 0x140017c9c
movzx eax, byte [rcx + 1]
test al, al
je 0x140017c58
mov rcx, qword [rcx + 8]
movzx eax, byte [rcx]
test al, al
jne 0x140017c83
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140017c52
cmp qword [rax], 0
jne 0x140017c58
cmp byte [rcx + 1], 0
je 0x140017c87
movzx eax, byte [rdi + 0x18]
mov byte [rdi + 0x12], 0
jmp 0x140017d69
cmp al, 1
jne 0x140017c6d
mov byte [rbx + 0x12], r15b
movzx eax, byte [rbx + 0x11]
test al, al
je 0x140017a5f
mov byte [rbp + rax], 1
jmp 0x140017a5f
cmp al, 1
je 0x140017c58
mov rcx, qword [rcx + 8]
lea rdx, [0x140106204]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140017c58
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x140017bf0
movzx ecx, byte [rdi + 0x12]
cmp cl, 2
jne 0x140017d61
cmp word [rdi + 0xa], 0
jne 0x140017d11
cmp word [rdi + 8], 0
jne 0x140017d11
cmp word [rdi + 6], 0
jne 0x140017d11
movzx eax, byte [rdi + 0xf]
test al, 0xc0
je 0x140017cd7
test al, 0xc
je 0x140017d11
movzx edx, byte [rdi + 0x10]
test dl, dl
je 0x140017cf5
lea eax, [rdx - 1]
cmp al, 5
ja 0x140017ced
cmp dl, 3
jne 0x140017cf5
jmp 0x140017d11
add dl, 0x66
cmp dl, 5
ja 0x140017d11
movzx edx, byte [rdi + 0x11]
test dl, dl
je 0x140017d61
lea eax, [rdx - 1]
cmp al, 5
ja 0x140017d09
cmp dl, 3
jne 0x140017d15
add dl, 0x66
cmp dl, 5
jbe 0x140017d15
mov byte [rdi + 0x12], 3
movzx eax, byte [rdi + 0x18]
test al, al
je 0x140017d36
movzx edx, word [rdi + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rdi + 0x18], al
movzx ecx, byte [rdi + 0x12]
sub ecx, 1
je 0x140017dda
sub ecx, 1
je 0x140017dd1
cmp ecx, 1
jne 0x140017de1
or byte [0x1401289d6], 3
jmp 0x140017de1
movzx eax, byte [rdi + 0x18]
test cl, cl
jne 0x140017d19
test al, al
jne 0x140017d36
movzx r9d, byte [rdi + 0x10]
mov r8d, dword [rdi]
mov ecx, r9d
sub ecx, 0x10
je 0x140017da3
sub ecx, 1
je 0x140017d9d
sub ecx, 1
je 0x140017d97
sub ecx, 0x49
je 0x140017d91
cmp ecx, 1
jne 0x140017da7
or r8d, 8
jmp 0x140017da7
or r8d, 1
jmp 0x140017da7
or r8d, 2
jmp 0x140017da7
or r8d, 4
movzx edx, word [rdi + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
setne cl
mov byte [rdi + 0x18], cl
test eax, eax
jne 0x140017d36
mov byte [rdi + 0x12], 1
jmp 0x140017d36
or byte [0x1401289d6], 2
jmp 0x140017de1
or byte [0x1401289d6], 1
movzx eax, word [0x140128a9c]
inc r15d
inc r12
add rsi, 8
cmp r15d, eax
jl 0x140017ba3
mov eax, dword [0x140128a94]
test eax, eax
jne 0x140017e20
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x140017e20
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x140017e20
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
je 0x140017e27
or byte [0x1401289d6], 1
cmp byte [0x140127b41], 0
jne 0x140017e3d
cmp byte [0x140125aec], 0
je 0x140017e44
test eax, eax
je 0x140017e44
or byte [0x1401289d6], 2
movzx edx, word [0x140128a9c]
movzx r9d, byte [0x1401289d7]
movzx r8d, byte [0x1401289d6]
mov rcx, qword [0x140128a88]
call fcn.140015600
cmp dword [0x140128a84], 0
je 0x140017e9b
cmp byte [0x14012787e], 0
jne 0x140017e9b
mov rcx, qword [0x140127a60]
xor r9d, r9d
lea edx, [r9 + 9]
lea r8d, [r9 + 0xa]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x14012787e]
mov rbx, qword [rbp + 0x120]
mov rsi, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop rbp
ret