Function at 0x1401e40d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x58], r9
movzx r12d, r8b
mov byte [rsp + 0x48], r8b
mov qword [rsp + 0x60], rdx
mov r13, rcx
xor r14d, r14d
mov dword [rsp + 0x68], r14d
xor sil, sil
mov byte [0x1411dd03b], sil
mov dword [rsp + 0x6c], 0x4f452525
mov dword [rsp + 0x44], 0xc6d3d0c5
mov dword [rbp - 0x58], 0x69542525
mov dword [rbp - 0x54], 0x3a656c74
mov dword [rsp + 0x4c], 0x5350452e
mov dword [rsp + 0x50], 0x7370652e
mov dword [rsp + 0x40], 0x46535045
mov dword [rbp - 0x78], 0x53502125
mov dword [rbp - 0x74], 0x6f64412d
mov word [rbp - 0x70], 0x6562
mov dword [rsp + 0x78], 0x46535045
mov dword [rsp + 0x7c], 0x322e312d
mov dword [rbp - 0x68], 0x776f6873
mov dword [rbp - 0x64], 0x65676170
mov dword [rbp - 0x60], 0x46535045
mov dword [rbp - 0x5c], 0x302e322d
mov dword [rbp - 0x80], 0x46535045
mov dword [rbp - 0x7c], 0x302e332d
mov eax, dword [rcx + 0x28]
imul eax, dword [rcx + 0x48]
lea ecx, [rax + rax]
lea edx, [r14 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x1401e46d0
mov eax, dword [r13 + 0x28]
imul eax, dword [r13 + 0x48]
mov ebx, eax
mov r8d, eax
xor edx, edx
mov rcx, r15
call sub.VCRUNTIME140.dll_memset
lea eax, [rbx + rbx]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
mov r9, r15
mov rbx, qword [rsp + 0x58]
mov r8, rbx
movzx edx, r12b
mov ecx, dword [r13 + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401e4794
mov eax, dword [rsp + 0x44]
cmp eax, dword [r15]
jne 0x1401e451e
mov eax, dword [r13 + 0x28]
imul eax, dword [r13 + 0x48]
mov edx, eax
add eax, eax
cmp eax, 0x18
jbe 0x1401e4794
mov ebx, dword [r15 + 4]
mov dword [rsp + 0x40], ebx
cmp byte [0x1411dd028], sil
je 0x1401e42ee
mov eax, ebx
shr eax, 0x18
mov byte [rsp + 0x40], al
mov eax, ebx
shr eax, 0x10
mov byte [rsp + 0x41], al
mov eax, ebx
shr eax, 8
mov byte [rsp + 0x42], al
mov byte [rsp + 0x43], bl
mov eax, dword [r15 + 8]
mov ecx, eax
shr ecx, 0x18
mov byte [rsp + 0x6c], cl
mov ecx, eax
shr ecx, 0x10
mov byte [rsp + 0x6d], cl
mov ecx, eax
shr ecx, 8
mov byte [rsp + 0x6e], cl
mov byte [rsp + 0x6f], al
mov eax, dword [r15 + 0x14]
mov ecx, eax
shr ecx, 0x18
mov byte [rsp + 0x78], cl
mov ecx, eax
shr ecx, 0x10
mov byte [rsp + 0x79], cl
mov ecx, eax
shr ecx, 8
mov byte [rsp + 0x7a], cl
mov byte [rsp + 0x7b], al
mov eax, dword [r15 + 0x18]
mov ecx, eax
shr ecx, 0x18
mov byte [rsp + 0x44], cl
mov ecx, eax
shr ecx, 0x10
mov byte [rsp + 0x45], cl
mov ecx, eax
shr ecx, 8
mov byte [rsp + 0x46], cl
mov byte [rsp + 0x47], al
mov ebx, dword [rsp + 0x44]
mov dword [rsp + 0x44], ebx
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x78], eax
mov ebx, dword [rsp + 0x6c]
mov dword [rsp + 0x6c], ebx
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
jmp 0x1401e4306
mov eax, dword [r15 + 0x18]
mov dword [rsp + 0x44], eax
mov eax, dword [r15 + 0x14]
mov dword [rsp + 0x78], eax
mov eax, dword [r15 + 8]
mov dword [rsp + 0x6c], eax
lea ecx, [rdx + rdx*4]
add ecx, ecx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12, rax
test rax, rax
jne 0x1401e4334
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1401e46d0
mov eax, dword [r13 + 0x28]
imul eax, dword [r13 + 0x48]
mov ebx, eax
lea eax, [rax + rax*4]
add eax, eax
mov edi, eax
mov r8d, eax
xor edx, edx
mov rcx, r12
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov eax, dword [rsp + 0x40]
div ebx
mov r8d, eax
add r8, qword [rsp + 0x58]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], edi
mov r9, r12
movzx edx, byte [rsp + 0x48]
mov ecx, dword [r13 + 0x48]
call fcn.1401c1720
test eax, eax
jne 0x1401e439f
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor al, al
jmp 0x1401e46d4
mov r9d, dword [r13 + 0x48]
mov r8d, dword [r13 + 0x28]
mov ecx, r8d
imul ecx, r9d
xor edx, edx
mov eax, dword [rsp + 0x40]
div ecx
mov esi, edx
movzx edx, byte [0x1411dd026]
test dl, dl
jne 0x1401e44e5
mov edi, dword [rsp + 0x4c]
mov ebx, dword [rsp + 0x50]
nop
mov r10d, esi
imul r8d, r9d
lea eax, [r8 + r8*4]
lea ecx, [rax + rax]
lea rax, [r10 + 9]
cmp rax, rcx
jae 0x1401e44e5
mov rax, qword [rbp - 0x58]
cmp rax, qword [r10 + r12]
jne 0x1401e44a8
mov al, 0x20
cmp al, byte [r10 + r12 + 8]
jne 0x1401e44a8
mov byte [0x1411dd03b], 1
add esi, 9
test dl, dl
jne 0x1401e44dc
mov eax, dword [r13 + 0x28]
imul eax, dword [r13 + 0x48]
lea eax, [rax + rax*4]
lea edx, [rax + rax]
nop word [rax + rax]
lea rax, [rsi + 4]
cmp rax, rdx
jae 0x1401e44dc
cmp edi, dword [rsi + r12]
je 0x1401e4459
cmp ebx, dword [rsi + r12]
je 0x1401e4459
cmp r14d, 0x80
jae 0x1401e4459
inc esi
inc r14d
jmp 0x1401e4430
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
sub esi, r14d
mov r8d, r14d
mov edx, esi
add rdx, r12
lea rcx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x40]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
movzx edx, byte [0x1411dd026]
cmp byte [0x1411dd03b], 0
jne 0x1401e44dc
mov r9d, dword [r13 + 0x48]
mov r8d, dword [r13 + 0x28]
mov eax, r8d
imul eax, r9d
lea eax, [rax + rax*4]
add eax, eax
cmp esi, eax
jae 0x1401e44d5
inc esi
test dl, dl
je 0x1401e43d0
jmp 0x1401e44e5
mov byte [0x1411dd03b], 0
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x78]
cmp eax, ecx
jae 0x1401e44f7
add ecx, dword [rsp + 0x44]
jmp 0x1401e44ff
jbe 0x1401e4508
mov ecx, dword [rsp + 0x6c]
add ecx, eax
mov rdx, qword [rsp + 0x60]
mov qword [rdx + 0x10], rcx
mov sil, 1
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rsp + 0x58]
jmp 0x1401e4655
mov rax, qword [rbp - 0x78]
cmp rax, qword [r15]
jne 0x1401e4794
movzx eax, word [rbp - 0x70]
cmp ax, word [r15 + 8]
jne 0x1401e4794
mov sil, 1
mov rax, qword [rsp + 0x78]
cmp rax, qword [r15 + 0xf]
jne 0x1401e46f4
mov ebx, 0xf
mov r9d, ebx
mov rdi, qword [rsp + 0x58]
mov r8, rdi
movzx edx, r12b
mov rcx, r13
call fcn.1401e9060
mov byte [0x1411dd03b], al
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea edx, [rbx - 0xe]
mov ecx, 0x1400000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
test rax, rax
je 0x1401e4652
xor edx, edx
mov r8d, 0x1400000
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [r13 + 0x48]
mov r8d, dword [r13 + 0x28]
imul r8d, ecx
xor edx, edx
mov eax, ebx
div r8d
mov r8d, eax
add r8, rdi
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x1400000
mov r9, r15
movzx edx, r12b
call fcn.1401c1720
test eax, eax
je 0x1401e4794
cmp byte [0x1411dd026], r14b
jne 0x1401e463e
mov ecx, dword [r13 + 0x28]
imul ecx, dword [r13 + 0x48]
xor edx, edx
mov eax, ebx
div ecx
mov r9d, dword [rsp + 0x6c]
mov rax, qword [rbp - 0x68]
mov r10b, 0x46
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rdx + 8]
cmp rcx, 0x1400000
jae 0x1401e463e
cmp rax, qword [rdx + r15]
je 0x1401e463b
cmp r9d, dword [rdx + r15]
jne 0x1401e4630
cmp r10b, byte [rdx + r15 + 4]
je 0x1401e4636
inc ebx
inc edx
jmp 0x1401e4610
add ebx, 8
jmp 0x1401e463e
add ebx, 0xb
mov eax, ebx
mov rdx, qword [rsp + 0x60]
mov qword [rdx + 0x10], rax
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, rdi
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e46d0
mov r8d, 0xa
mov rdx, rbx
lea rcx, [rbp - 0x80]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rsp + 0x68], 1
mov rdx, rdi
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x80]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, sil
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0x158
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [rbp - 0x60]
cmp rax, qword [r15 + 0xf]
jne 0x1401e4734
mov r9d, 0xf
mov r8, rbx
movzx edx, r12b
mov rcx, r13
call fcn.1401e9060
mov byte [0x1411dd03b], al
mov rdx, qword [rsp + 0x60]
mov qword [rdx + 0x10], 0x1400000
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1401e4655
mov rax, qword [rbp - 0x80]
cmp rax, qword [r15 + 0xf]
jne 0x1401e4786
mov r9d, 0x18
mov r8, rbx
movzx edx, r12b
mov rcx, r13
call fcn.1401e9060
mov byte [0x1411dd03b], al
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r9, rbx
movzx r8d, r12b
mov edx, 0x18
mov rcx, r13
call fcn.1401e7a40
mov eax, eax
mov rdx, qword [rsp + 0x60]
mov qword [rdx + 0x10], rax
jmp 0x1401e4655
mov eax, dword [rsp + 0x40]
cmp eax, dword [r15 + 0xf]
jne 0x1401e438f
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test sil, sil
je 0x1401e46d0
mov rbx, qword [rsp + 0x58]
jmp 0x1401e4655