Function at 0x140016c70
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push r14
push r15
sub rsp, 0x120
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x120], rbx
lea rcx, [rbp]
mov qword [rbp + 0x128], rsi
xor edx, edx
mov qword [rbp + 0x130], rdi
mov r8d, 0x100
mov qword [rbp + 0x138], r12
call sub.VCRUNTIME140.dll_memset
movzx eax, word [0x140114a8c]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140016cc9
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400d7ad0
sub rsp, rcx
xor r15d, r15d
cmp r15w, word [0x140114a8c]
mov r14d, r15d
lea r12, [rsp + 0x20]
jae 0x140016db9
mov rdi, r12
mov esi, r15d
nop word [rax + rax]
cmp byte [0x140113b30], r15b
mov rax, qword [0x140114a78]
mov rbx, qword [rsi + rax]
je 0x140016d20
mov rcx, rbx
call fcn.140010ad0
test al, al
je 0x140016d67
cmp word [rbx + 6], r15w
je 0x140016d4f
cmp byte [rbx + 0x19], r15b
je 0x140016d67
mov byte [rdi], r15b
movzx eax, byte [rbx + 0x12]
cmp byte [rbx + 0x14], r15b
je 0x140016fa0
test al, al
jne 0x140016fa8
mov byte [rbx + 0x12], 1
jmp 0x140016fa8
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140016d67
cmp byte [rax + 0x28], r15b
jne 0x140016d2d
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140016d58
mov byte [rdi], 1
cmp byte [rbx + 0x18], r15b
je 0x140016d9f
movzx edx, word [rbx + 4]
mov rcx, qword [0x140113a50]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rbx + 0x18], al
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x140016d9f
mov byte [rax + 0x27], r15b
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140016d92
movzx eax, word [0x140114a8c]
inc r14d
add rsi, 8
inc rdi
cmp r14d, eax
jl 0x140016d00
movzx ecx, word [0x140114a8c]
mov ebx, r15d
test ecx, ecx
je 0x140016ec4
mov rdi, r15
mov r11, r12
cmp byte [r11], r15b
jne 0x140016eac
mov rax, qword [0x140114a78]
mov rdx, qword [rdi + rax]
cmp byte [rdx + 0x16], r15b
je 0x140016e3a
cmp byte [rdx + 0x10], r15b
je 0x140016e3a
mov r8d, r15d
test ecx, ecx
je 0x140016e3a
mov r9, r15
nop dword [rax + rax]
mov rax, qword [0x140114a78]
mov rcx, qword [r9 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [rcx + 0x10], al
jne 0x140016e27
cmp byte [rcx + 0x12], r15b
jne 0x140016e27
movzx eax, byte [rdx + 0xf]
cmp byte [rcx + 0xf], al
jne 0x140016e27
mov byte [rcx + 0x12], 1
movzx eax, word [0x140114a8c]
inc r8d
add r9, 8
cmp r8d, eax
jl 0x140016e00
cmp byte [rdx + 0x15], r15b
je 0x140016eac
cmp byte [rdx + 0x10], r15b
je 0x140016eac
cmp byte [rdx + 0xe], r15b
jne 0x140016eac
cmp word [rdx + 0xa], r15w
jne 0x140016eac
cmp byte [rdx + 0x11], r15b
jne 0x140016eac
cmp r15w, word [0x140114a8c]
mov r9d, r15d
jae 0x140016eac
mov r10, r15
nop dword [rax]
mov rax, qword [0x140114a78]
mov r8, qword [r10 + rax]
movzx eax, byte [rdx + 0x10]
cmp byte [r8 + 0x10], al
jne 0x140016e99
cmp byte [r8 + 0x12], r15b
jne 0x140016e99
mov eax, dword [rdx]
and eax, dword [r8]
cmp eax, dword [rdx]
jne 0x140016e99
mov byte [r8 + 0x12], 1
movzx eax, word [0x140114a8c]
inc r9d
add r10, 8
cmp r9d, eax
jl 0x140016e70
movzx ecx, word [0x140114a8c]
inc ebx
inc r11
add rdi, 8
cmp ebx, ecx
jl 0x140016dd1
cmp qword [0x140113a38], r15
setne byte [0x1401149c6]
cmp r15w, word [0x140114a8c]
jae 0x140017126
mov rsi, r15
cmp byte [r12], 0
jne 0x14001710c
mov rax, qword [0x140114a78]
mov rdi, qword [rsi + rax]
movzx ecx, byte [rdi + 0x12]
test cl, cl
jne 0x140016feb
movzx eax, byte [rdi + 0x10]
mov cl, 1
mov byte [rdi + 0x12], 1
cmp byte [rbp + rax], 0
jne 0x140016feb
mov rbx, qword [rdi + 0x28]
test rbx, rbx
je 0x140016feb
nop word [rax + rax]
cmp qword [rbx + 8], 0
jne 0x140016fda
cmp byte [rbx + 0x28], 0
je 0x140016fda
cmp byte [0x140113b30], 0
je 0x140016f98
mov r9, qword [rbx]
mov rcx, r9
call fcn.1400ab3d0
test eax, eax
je 0x140016f62
sub eax, 1
jne 0x140016fda
mov rcx, qword [r9 + 0x10]
test rcx, rcx
je 0x140016fda
cmp byte [rcx], 0xcd
jne 0x140016fda
movzx eax, byte [rcx + 1]
test al, al
je 0x140016f98
mov rcx, qword [rcx + 8]
movzx eax, byte [rcx]
test al, al
jne 0x140016fc1
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140016f92
cmp qword [rax], 0
jne 0x140016f98
cmp byte [rcx + 1], 0
je 0x140016fc5
mov byte [rdi + 0x12], 0
xor cl, cl
jmp 0x140016feb
cmp al, 1
jne 0x140016fa8
mov byte [rbx + 0x12], r15b
movzx eax, byte [rbx + 0x11]
test al, al
je 0x140016d9f
movzx eax, al
mov byte [rbp + rax], 1
jmp 0x140016d9f
cmp al, 1
je 0x140016f98
mov rcx, qword [rcx + 8]
lea rdx, [0x1400f11d4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140016f98
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x140016f30
movzx ecx, byte [rdi + 0x12]
cmp cl, 2
jne 0x14001705d
cmp word [rdi + 0xa], 0
jne 0x140017057
cmp word [rdi + 8], 0
jne 0x140017057
cmp word [rdi + 6], 0
jne 0x140017057
movzx eax, byte [rdi + 0xf]
test al, 0xc0
je 0x140017011
test al, 0xc
je 0x140017057
movzx ecx, byte [rdi + 0x10]
test cl, cl
je 0x14001702d
lea eax, [rcx - 1]
cmp al, 5
ja 0x140017025
cmp cl, 3
jne 0x14001702d
add cl, 0x66
cmp cl, 5
ja 0x140017057
movzx edx, byte [rdi + 0x11]
mov cl, 2
test dl, dl
je 0x14001705d
lea eax, [rdx - 1]
cmp al, 5
ja 0x140017043
cmp dl, 3
jne 0x14001704b
add dl, 0x66
cmp dl, 5
ja 0x14001704f
mov al, 1
jmp 0x140017051
xor al, al
mov cl, 2
test al, al
jne 0x14001705d
mov byte [rdi + 0x12], 3
mov cl, 3
movzx eax, byte [rdi + 0x18]
test cl, cl
jne 0x1400170c3
test al, al
jne 0x1400170e0
movzx ecx, byte [rdi + 0x10]
mov r8d, dword [rdi]
cmp cl, 0x10
je 0x140017098
cmp cl, 0x11
je 0x140017092
cmp cl, 0x12
je 0x14001708c
lea eax, [rcx - 0x5b]
cmp al, 1
ja 0x14001709c
or r8d, 8
jmp 0x14001709c
or r8d, 1
jmp 0x14001709c
or r8d, 2
jmp 0x14001709c
or r8d, 4
movzx edx, word [rdi + 4]
movzx r9d, cl
mov rcx, qword [0x140113a50]
call qword [sym.imp.USER32.dll_RegisterHotKey]
test eax, eax
setne cl
mov byte [rdi + 0x18], cl
test eax, eax
jne 0x1400170e0
mov byte [rdi + 0x12], 1
jmp 0x1400170e0
test al, al
je 0x1400170e0
movzx edx, word [rdi + 4]
mov rcx, qword [0x140113a50]
call qword [sym.imp.USER32.dll_UnregisterHotKey]
test eax, eax
sete al
mov byte [rdi + 0x18], al
movzx ecx, byte [rdi + 0x12]
sub ecx, 1
je 0x140017105
sub ecx, 1
je 0x1400170fc
sub ecx, 1
jne 0x14001710c
or byte [0x1401149c6], 3
jmp 0x14001710c
or byte [0x1401149c6], 2
jmp 0x14001710c
or byte [0x1401149c6], 1
movzx eax, word [0x140114a8c]
inc r15d
inc r12
add rsi, 8
cmp r15d, eax
jl 0x140016ee3
mov eax, dword [0x140114a84]
test eax, eax
jne 0x14001714b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x14001714b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
jne 0x14001714b
cmp dword [reloc.OLEAUT32.dll_VariantInit], 7
je 0x140017152
or byte [0x1401149c6], 1
cmp byte [0x140113b31], 0
jne 0x140017168
cmp byte [0x140111adc], 0
je 0x14001716f
test eax, eax
je 0x14001716f
or byte [0x1401149c6], 2
movzx edx, word [0x140114a8c]
call fcn.140014910
cmp dword [0x140114a74], 0
je 0x1400171af
cmp byte [0x14011386e], 0
jne 0x1400171af
mov rcx, qword [0x140113a50]
xor r9d, r9d
lea edx, [r9 + 9]
lea r8d, [r9 + 0xa]
call qword [sym.imp.USER32.dll_SetTimer]
test rax, rax
setne byte [0x14011386e]
mov rbx, qword [rbp + 0x120]
mov rsi, qword [rbp + 0x128]
mov rdi, qword [rbp + 0x130]
mov r12, qword [rbp + 0x138]
lea rsp, [rbp + 0x100]
pop r15
pop r14
pop rbp
ret