Function at 0x1401f1070
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x78]
sub rsp, 0x178
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov qword [rbp - 0x80], r9
movzx edi, r8b
mov byte [rsp + 0x60], r8b
mov qword [rbp - 0x68], rdx
mov r13, rcx
mov qword [rbp - 0x78], rcx
mov rax, qword [rbp + 0xe0]
mov qword [rbp - 0x60], rax
xor ecx, ecx
mov dword [rbp - 0x70], ecx
xor r15b, r15b
mov byte [rsp + 0x40], r15b
mov dword [rsp + 0x48], 0x5367674f
mov dword [rbp - 0x40], 0x62726f76
mov word [rbp - 0x3c], 0x7369
mov dword [rsp + 0x4c], 0x68706958
mov dword [rsp + 0x44], 0x78656570
mov dword [rbp - 0x38], 0x6c746974
mov dword [rbp - 0x28], 0x6c746954
mov dword [rbp - 0x30], 0x4c544954
mov dword [rbp - 0x48], 0x6f656874
mov word [rbp - 0x44], 0x6172
mov dword [rsp + 0x50], ecx
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov eax, dword [r13 + 0x28]
imul eax, dword [r13 + 0x48]
imul ebx, eax, 0x32
mov dword [rsp + 0x70], ebx
mov r14d, ecx
mov qword [rsp + 0x68], rcx
mov esi, ebx
mov qword [rsp + 0x58], rsi
lea edx, [rcx + 1]
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1401f1863
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r11d, r11d
mov dword [rsp + 0x30], r11d
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], ebx
mov r9, r12
mov r8, qword [rbp - 0x80]
movzx edx, dil
mov ecx, dword [r13 + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401f185a
cmp ebx, 0x22
jbe 0x1401f121c
mov ecx, dword [rbp - 0x40]
cmp ecx, dword [r12 + 0x1d]
jne 0x1401f11c5
movzx eax, word [rbp - 0x3c]
cmp ax, word [r12 + 0x21]
je 0x1401f11d8
mov eax, dword [rsp + 0x44]
cmp eax, dword [r12 + 0x1d]
jne 0x1401f185a
movzx eax, word [rbp - 0x3c]
mov r15b, 1
mov byte [rsp + 0x40], r15b
cmp ebx, 0x5d
jbe 0x1401f121c
mov byte [rsp + 0x40], r15b
cmp ecx, dword [r12 + 0x1d]
jne 0x1401f121c
cmp ax, word [r12 + 0x21]
jne 0x1401f121c
mov byte [rsp + 0x40], r15b
mov eax, dword [rbp - 0x48]
cmp eax, dword [r12 + 0x57]
jne 0x1401f121c
movzx eax, word [rbp - 0x44]
cmp ax, word [r12 + 0x5b]
jne 0x1401f121c
xor r15b, r15b
jmp 0x1401f185a
cmp byte [0x1411dd026], r14b
jne 0x1401f1718
mov ebx, dword [rsp + 0x48]
mov edi, dword [rsp + 0x4c]
mov r9, rsi
xor r11d, r11d
nop word [rax + rax]
mov r12d, dword [r13 + 0x48]
mov ecx, dword [r13 + 0x28]
imul ecx, r12d
xor edx, edx
mov eax, dword [rsp + 0x50]
div ecx
mov esi, edx
mov r15d, eax
add r15, qword [rbp - 0x80]
mov r14d, r11d
lea rax, [rdx + 4]
cmp rax, r9
jae 0x1401f1708
mov r8, r9
xor edx, edx
mov rcx, qword [rsp + 0x78]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x78]
mov r8, r15
movzx edx, byte [rsp + 0x60]
mov ecx, r12d
call fcn.1401c1720
mov r12, qword [rsp + 0x78]
test eax, eax
je 0x1401f170d
cmp ebx, dword [r12 + rsi]
jne 0x1401f170d
add esi, 0x1a
mov r10d, dword [rsp + 0x70]
cmp esi, r10d
jae 0x1401f170d
movzx r8d, byte [rsi + r12]
mov rax, qword [rbp - 0x60]
mov byte [rax], 1
xor r11d, r11d
mov edx, r11d
test r8d, r8d
je 0x1401f12f9
inc esi
cmp esi, r10d
jae 0x1401f12f9
movzx ecx, byte [rsi + r12]
add r14d, ecx
inc edx
cmp edx, r8d
jb 0x1401f12e3
lea eax, [r14 + r8]
mov r13d, dword [rsp + 0x50]
add r13d, 0x1b
add r13d, eax
mov dword [rsp + 0x50], r13d
mov byte [rsp + 0x40], 1
add esi, 2
lea rax, [rsi + 6]
mov r9, r10
cmp rax, r10
jae 0x1401f173e
mov eax, dword [rbp - 0x40]
cmp eax, dword [r12 + rsi]
jne 0x1401f1612
movzx eax, word [rbp - 0x3c]
cmp ax, word [r12 + rsi + 4]
jne 0x1401f1612
cmp byte [rbp - 0x20], r11b
jne 0x1401f1612
add esi, 6
lea edx, [rsi + 4]
cmp edx, r10d
jae 0x1401f172e
mov ecx, esi
add rcx, r12
cmp byte [0x1411dd028], r11b
je 0x1401f138f
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x4c], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x4d], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x4e], al
movzx eax, byte [rcx]
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x4c]
jmp 0x1401f1391
mov eax, dword [rcx]
lea r13d, [rax + rdx]
lea r8d, [rax - 8]
lea rax, [rdx + 4]
cmp rax, r10
jae 0x1401f1623
cmp edi, dword [r12 + rdx]
jne 0x1401f1612
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
lea eax, [r8 + rdx]
mov esi, r11d
movzx r14d, r11w
movzx r15d, r11w
cmp eax, r10d
jae 0x1401f13fd
mov rsi, qword [rax + r12]
mov qword [rbp - 0x20], rsi
mov r14, rsi
shr r14, 0x20
mov r15, rsi
shr r15, 0x30
mov edx, 0x80
lea ecx, [rdx - 0x7f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdx, rax
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdx + 0xa], xmm0
movups xmmword [rdx + 0x1a], xmm0
movups xmmword [rdx + 0x2a], xmm0
movups xmmword [rdx + 0x3a], xmm0
movups xmmword [rdx + 0x4a], xmm0
movups xmmword [rdx + 0x5a], xmm0
movups xmmword [rdx + 0x6a], xmm0
mov dword [rdx + 0x7a], eax
mov word [rdx + 0x7e], ax
mov dword [rdx], esi
mov byte [rdx + 4], 0x3a
mov word [rdx + 5], r14w
mov byte [rdx + 7], 0x3a
mov word [rdx + 8], r15w
lea r8d, [r13 + 4]
mov r10d, dword [rsp + 0x70]
cmp r8d, r10d
jae 0x1401f1726
mov ecx, r13d
add rcx, r12
movzx r11d, byte [0x1411dd028]
test r11b, r11b
je 0x1401f149a
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x48], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x49], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x4a], al
movzx eax, byte [rcx]
mov byte [rsp + 0x4b], al
mov r9d, dword [rsp + 0x48]
jmp 0x1401f149d
mov r9d, dword [rcx]
test r9d, r9d
je 0x1401f160a
lea edx, [r8 + 4]
nop word [rax + rax]
lea rax, [rdx + 5]
cmp rax, r10
jae 0x1401f160a
mov eax, dword [rbp - 0x38]
cmp eax, dword [r12 + rdx]
jne 0x1401f14d3
mov al, 0x65
cmp al, byte [r12 + rdx + 4]
je 0x1401f1557
mov eax, dword [rbp - 0x30]
cmp eax, dword [r12 + rdx]
jne 0x1401f14e5
mov al, 0x45
cmp al, byte [r12 + rdx + 4]
je 0x1401f1557
mov eax, dword [rbp - 0x28]
cmp eax, dword [r12 + rdx]
jne 0x1401f14f7
mov al, 0x65
cmp al, byte [r12 + rdx + 4]
je 0x1401f1557
dec r9d
cmp edx, r10d
jae 0x1401f160a
mov eax, r8d
add rax, r12
test r11b, r11b
je 0x1401f1533
movzx ecx, byte [rax + 3]
mov byte [rsp + 0x44], cl
movzx ecx, byte [rax + 2]
mov byte [rsp + 0x45], cl
movzx ecx, byte [rax + 1]
mov byte [rsp + 0x46], cl
movzx ecx, byte [rax]
mov byte [rsp + 0x47], cl
mov eax, dword [rsp + 0x44]
jmp 0x1401f1535
mov eax, dword [rax]
add r8d, 4
add r8d, eax
lea edx, [r8 + 4]
cmp edx, r10d
ja 0x1401f160a
test r9d, r9d
je 0x1401f160a
jmp 0x1401f14b0
cmp edx, r10d
jae 0x1401f160a
mov ecx, r8d
add rcx, r12
test r11b, r11b
je 0x1401f158b
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x48], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x47], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x46], al
movzx eax, byte [rcx]
mov byte [rbp - 0x45], al
mov ecx, dword [rbp - 0x48]
jmp 0x1401f158d
mov ecx, dword [rcx]
add ecx, 0xfffffffa
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov r8d, 0x80
cmp ecx, r8d
cmova ecx, r8d
lea eax, [rdx + 6]
add eax, ecx
cmp eax, r10d
jae 0x1401f160a
mov r8d, ecx
add edx, 6
add rdx, r12
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0xffffffff
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x58]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromLatin1_char_const____ptr64__int_]
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x58]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
xor r11d, r11d
mov r9, qword [rsp + 0x58]
cmp byte [0x1411dd026], 0
mov r13, qword [rbp - 0x78]
je 0x1401f1240
mov r14, qword [rsp + 0x68]
movzx r15d, byte [rsp + 0x40]
mov r13d, dword [rsp + 0x50]
test r14, r14
je 0x1401f184f
mov rdx, r14
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov edx, 0x2d
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_int____ptr64]
mov rbx, rax
mov edx, 0x3a
lea rcx, [rsp + 0x40]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_int____ptr64]
mov r9d, 1
movzx r8d, word [rbx]
movzx edx, word [rax]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QChar__class_QChar__enum_Qt::CaseSensitivity____ptr64]
xor r8d, r8d
mov edx, r8d
mov ecx, r8d
mov rax, r14
inc edx
cmp byte [rax], r8b
je 0x1401f16a6
inc ecx
inc rax
cmp ecx, 0x20
jb 0x1401f1695
mov edi, r8d
mov ebx, edx
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r11d, r11d
mov r8d, r11d
mov r9, rsi
mov rdx, r14
movabs r10, 0x400200100000000
nop dword [rax]
movzx ecx, byte [rdx]
test cl, cl
je 0x1401f174b
cmp cl, 0x3a
ja 0x1401f16f2
bt r10, rcx
jb 0x1401f16fa
mov byte [r9], cl
inc edi
inc r9
inc r8d
inc rdx
cmp r8d, 0x20
jb 0x1401f16e0
jmp 0x1401f1752
mov r12, qword [rsp + 0x78]
movzx r15d, byte [rsp + 0x40]
mov r14, qword [rsp + 0x68]
test r15b, r15b
je 0x1401f185a
jmp 0x1401f162e
mov r14, rdx
jmp 0x1401f1628
mov r14, qword [rsp + 0x68]
movzx r15d, byte [rsp + 0x40]
jmp 0x1401f1633
mov r14, qword [rsp + 0x68]
mov r15b, 1
jmp 0x1401f1633
movsxd rax, edi
mov byte [rax + rsi], r11b
mov qword [rsp + 0x78], r11
test rsi, rsi
je 0x1401f176e
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r11b
jne 0x1401f1763
jmp 0x1401f1773
mov eax, 0xffffffff
mov edx, eax
mov rcx, rsi
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x58]
call fcn.1400fa750
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movabs rcx, 0x19254d3800
mov rax, qword [rsp + 0x78]
add rax, rcx
mov qword [rsp + 0x78], rax
mov rcx, qword [rbp - 0x68]
mov dword [rcx + 0x41], eax
shr rax, 0x20
mov dword [rcx + 0x45], eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401f184f
mov r8d, 0xa
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x78]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x80]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x70], 1
mov rdx, rdi
lea rcx, [rbp - 0x80]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x80]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x78]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov ecx, r13d
mov rax, qword [rbp - 0x68]
mov qword [rax + 0x10], rcx
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r15b
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0x178
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret