Function at 0x1400179d0
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x120
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x120], rbx
lea rcx, [rbp]
mov qword [rbp + 0x128], rsi
xor edx, edx
mov qword [rbp + 0x130], rdi
mov r8d, 0x100
mov qword [rbp + 0x138], r12
call sub.VCRUNTIME140.dll_memset
movzx eax, word [0x140128a9c]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140017a29
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400ecec0
sub rsp, rcx
xor r15d, r15d
cmp r15w, word [0x140128a9c]
mov r14d, r15d
lea r12, [rsp + 0x20]
jae 0x140017b19
mov rdi, r12
mov esi, r15d
nop word [rax + rax]
cmp byte [0x140127b40], r15b
mov rax, qword [0x140128a88]
mov rbx, qword [rsi + rax]
je 0x140017a80
mov rcx, rbx
call fcn.140011960
test al, al
je 0x140017ac7
cmp word [rbx + 6], r15w
je 0x140017aaf
cmp byte [rbx + 0x19], r15b
je 0x140017ac7
mov byte [rdi], r15b
movzx eax, byte [rbx + 0x12]
cmp byte [rbx + 0x14], r15b
je 0x140017d05
test al, al
jne 0x140017d0d
mov byte [rbx + 0x12], 1
jmp 0x140017d0d
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140017ac7
cmp byte [rax + 0x28], r15b
jne 0x140017a8d
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140017ab8
mov byte [rdi], 1
cmp byte [rbx + 0x18], r15b
je 0x140017aff
movzx edx, word [rbx + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rbx + 0x18], al
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140017aff
mov byte [rax + 0x27], r15b
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140017af2
movzx eax, word [0x140128a9c]
inc r14d
add rsi, 8
inc rdi
cmp r14d, eax
jl 0x140017a60
movzx ecx, word [0x140128a9c]
mov ebx, r15d
test ecx, ecx
je 0x140017c24
mov rdi, r15
mov r11, r12
cmp byte [r11], r15b
jne 0x140017c0c
mov rax, qword [0x140128a88]
mov rdx, qword [rdi + rax]
cmp byte [rdx + 0x16], r15b
je 0x140017b9a
cmp byte [rdx + 0x10], r15b
je 0x140017b9a
mov r8d, r15d
test ecx, ecx
je 0x140017b9a
mov r9, r15
nop dword [rax + rax]
mov rax, qword [0x140128a88]
mov rcx, qword [r9 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [rcx + 0x10], al
jne 0x140017b87
cmp byte [rcx + 0x12], r15b
jne 0x140017b87
movzx eax, byte [rdx + 0xf]
cmp byte [rcx + 0xf], al
jne 0x140017b87
mov byte [rcx + 0x12], 1
movzx eax, word [0x140128a9c]
inc r8d
add r9, 8
cmp r8d, eax
jl 0x140017b60
cmp byte [rdx + 0x15], r15b
je 0x140017c0c
cmp byte [rdx + 0x10], r15b
je 0x140017c0c
cmp byte [rdx + 0xe], r15b
jne 0x140017c0c
cmp word [rdx + 0xa], r15w
jne 0x140017c0c
cmp byte [rdx + 0x11], r15b
jne 0x140017c0c
cmp r15w, word [0x140128a9c]
mov r9d, r15d
jae 0x140017c0c
mov r10, r15
nop dword [rax]
mov rax, qword [0x140128a88]
mov r8, qword [r10 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [r8 + 0x10], al
jne 0x140017bf9
cmp byte [r8 + 0x12], r15b
jne 0x140017bf9
mov eax, dword [rdx]
and eax, dword [r8]
cmp eax, dword [rdx]
jne 0x140017bf9
mov byte [r8 + 0x12], 1
movzx eax, word [0x140128a9c]
inc r9d
add r10, 8
cmp r9d, eax
jl 0x140017bd0
movzx ecx, word [0x140128a9c]
inc ebx
inc r11
add rdi, 8
cmp ebx, ecx
jl 0x140017b31
cmp qword [0x140127a48], r15
setne byte [0x1401289d6]
cmp r15w, word [0x140128a9c]
jae 0x140017e9b
mov rsi, r15
cmp byte [r12], 0
jne 0x140017e81
mov rax, qword [0x140128a88]
mov rdi, qword [rsi + rax]
movzx ecx, byte [rdi + 0x12]
test cl, cl
jne 0x140017d4d
movzx eax, byte [rdi + 0x10]
mov cl, 1
mov byte [rdi + 0x12], 1
cmp byte [rbp + rax], 0
jne 0x140017d4d
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x140017d4d
nop word [rax + rax]
cmp qword [rbx + 8], 0
jne 0x140017d3c
cmp byte [rbx + 0x28], 0
je 0x140017d3c
cmp byte [0x140127b40], 0
je 0x140017cf8
mov r9, qword [rbx]
mov rcx, r9
call fcn.1400bcce0
test eax, eax
je 0x140017cc2
cmp eax, 1
jne 0x140017d3c
mov rcx, qword [r9 + 0x10]
test rcx, rcx
je 0x140017d3c
cmp byte [rcx], 0xcd
jne 0x140017d3c
movzx eax, byte [rcx + 1]
test al, al
je 0x140017cf8
mov rcx, qword [rcx + 8]
movzx eax, byte [rcx]
test al, al
jne 0x140017d23
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140017cf2
cmp qword [rax], 0
jne 0x140017cf8
cmp byte [rcx + 1], 0
je 0x140017d27
movzx eax, byte [rdi + 0x18]
mov byte [rdi + 0x12], 0
jmp 0x140017e09
cmp al, 1
jne 0x140017d0d
mov byte [rbx + 0x12], r15b
movzx eax, byte [rbx + 0x11]
test al, al
je 0x140017aff
mov byte [rbp + rax], 1
jmp 0x140017aff
cmp al, 1
je 0x140017cf8
mov rcx, qword [rcx + 8]
lea rdx, [0x140106214]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140017cf8
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x140017c90
movzx ecx, byte [rdi + 0x12]
cmp cl, 2
jne 0x140017e01
cmp word [rdi + 0xa], 0
jne 0x140017db1
cmp word [rdi + 8], 0
jne 0x140017db1
cmp word [rdi + 6], 0
jne 0x140017db1
movzx eax, byte [rdi + 0xf]
test al, 0xc0
je 0x140017d77
test al, 0xc
je 0x140017db1
movzx edx, byte [rdi + 0x10]
test dl, dl
je 0x140017d95
lea eax, [rdx - 1]
cmp al, 5
ja 0x140017d8d
cmp dl, 3
jne 0x140017d95
jmp 0x140017db1
add dl, 0x66
cmp dl, 5
ja 0x140017db1
movzx edx, byte [rdi + 0x11]
test dl, dl
je 0x140017e01
lea eax, [rdx - 1]
cmp al, 5
ja 0x140017da9
cmp dl, 3
jne 0x140017db5
add dl, 0x66
cmp dl, 5
jbe 0x140017db5
mov byte [rdi + 0x12], 3
movzx eax, byte [rdi + 0x18]
test al, al
je 0x140017dd6
movzx edx, word [rdi + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rdi + 0x18], al
movzx ecx, byte [rdi + 0x12]
sub ecx, 1
je 0x140017e7a
sub ecx, 1
je 0x140017e71
cmp ecx, 1
jne 0x140017e81
or byte [0x1401289d6], 3
jmp 0x140017e81
movzx eax, byte [rdi + 0x18]
test cl, cl
jne 0x140017db9
test al, al
jne 0x140017dd6
movzx r9d, byte [rdi + 0x10]
mov r8d, dword [rdi]
mov ecx, r9d
sub ecx, 0x10
je 0x140017e43
sub ecx, 1
je 0x140017e3d
sub ecx, 1
je 0x140017e37
sub ecx, 0x49
je 0x140017e31
cmp ecx, 1
jne 0x140017e47
or r8d, 8
jmp 0x140017e47
or r8d, 1
jmp 0x140017e47
or r8d, 2
jmp 0x140017e47
or r8d, 4
movzx edx, word [rdi + 4]
mov rcx, qword [0x140127a60]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
setne cl
mov byte [rdi + 0x18], cl
test eax, eax
jne 0x140017dd6
mov byte [rdi + 0x12], 1
jmp 0x140017dd6
or byte [0x1401289d6], 2
jmp 0x140017e81
or byte [0x1401289d6], 1
movzx eax, word [0x140128a9c]
inc r15d
inc r12
add rsi, 8
cmp r15d, eax
jl 0x140017c43
mov eax, dword [0x140128a94]
test eax, eax
jne 0x140017ec0
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x140017ec0
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x140017ec0
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
je 0x140017ec7
or byte [0x1401289d6], 1
cmp byte [0x140127b41], 0
jne 0x140017edd
cmp byte [0x140125aec], 0
je 0x140017ee4
test eax, eax
je 0x140017ee4
or byte [0x1401289d6], 2
movzx edx, word [0x140128a9c]
movzx r9d, byte [0x1401289d7]
movzx r8d, byte [0x1401289d6]
mov rcx, qword [0x140128a88]
call fcn.1400156a0
cmp dword [0x140128a84], 0
je 0x140017f3b
cmp byte [0x14012787e], 0
jne 0x140017f3b
mov rcx, qword [0x140127a60]
xor r9d, r9d
lea edx, [r9 + 9]
lea r8d, [r9 + 0xa]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x14012787e]
mov rbx, qword [rbp + 0x120]
mov rsi, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop rbp
ret