Function at 0x407de0
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43ef3d
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x45bb20]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], 0
mov esi, dword [ebp + 8]
mov eax, dword [sym.imp.Qt5CoreKso.dll_struct_kso_qt::QListData::Data_const_kso_qt::QListData::shared_null]
mov dword [esi], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 1
call dword [sym.imp.Qt5CoreKso.dll_public:_static_class_kso_qt::QCoreApplication____cdecl_kso_qt::QCoreApplication::instance_void_]
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.Qt5CoreKso.dll_public:_static_class_kso_qt::QString___cdecl_kso_qt::QCoreApplication::applicationDirPath_void_]
add esp, 4
push 0x448348
mov ecx, eax
mov dword [ebp - 4], 1
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString____thiscall_kso_qt::QString::append_char_const__]
push 0
push 0x44834c
mov ecx, eax
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString____thiscall_kso_qt::QString::append_char_const__]
push eax
lea ecx, [ebp - 0x34]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QLibrary::constructor_class_kso_qt::QString_const___class_kso_qt::QObject__]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push str._kso_QueryFeatureState
lea ecx, [ebp - 0x34]
call dword [sym.imp.Qt5CoreKso.dll_public:_void____cdecl___void____thiscall_kso_qt::QLibrary::resolve_char_const__]
mov edi, dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
test eax, eax
je 0x407f05
push 0x1000062
call eax
test eax, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
setne bl
call dword [sym.imp.Qt5CoreKso.dll_public_virtual:_void___thiscall_kso_qt::QLibrary::destructor_void_]
test bl, bl
je 0x407f12
push 0xc
push str._mailback_1
call edi
mov dword [ebp - 0x10], eax
add esp, 4
mov byte [ebp - 0x18], 0x20
mov ecx, esp
mov dword [ebp - 4], 4
push dword [ebp - 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push 1
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
push eax
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
jmp 0x407f12
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public_virtual:_void___thiscall_kso_qt::QLibrary::destructor_void_]
push 7
push str._app_1
call edi
mov dword [ebp - 0x18], eax
push 0x400
mov dword [ebp - 4], 6
call fcn.0043ca9d
mov esi, eax
mov dword [ebp - 0x1c], esi
push 0x400
push 0
push esi
mov byte [ebp - 4], 7
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
push 0x200
push esi
push 0
push dword [ebp + 0xc]
call sub.PSAPI.DLL_GetModuleBaseNameW
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push esi
push eax
call dword [sym.imp.Qt5CoreKso.dll_public:_static_class_kso_qt::QString___cdecl_kso_qt::QString::fromWCharArray_wchar_t_const___int_]
add esp, 0xc
mov dword [ebp - 0x14], 3
test esi, esi
je 0x407f7c
push esi
call fcn.0043caa6
add esp, 4
push ecx
mov ecx, esp
mov byte [ebp - 0x1c], 0x20
push dword [ebp - 0x1c]
mov byte [ebp - 4], 8
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
mov ebx, dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_class_kso_qt::QString_const___int__class_kso_qt::QChar_]
lea eax, [ebp - 0x10]
push 0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
call ebx
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 9
call fcn.0040fe40
lea ecx, [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x10]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 7
push str._dir_1
call edi
mov dword [ebp - 0x18], eax
add esp, 4
mov byte [ebp - 0x20], 0x20
mov ecx, esp
mov dword [ebp - 4], 0xa
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0
push dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call ebx
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0xb
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xa
push str._ccrash_1
call edi
mov dword [ebp - 0x18], eax
mov edi, dword [ebp + 0x18]
add esp, 4
mov ecx, esp
mov byte [ebp + 0x18], 0x20
mov dword [ebp - 4], 0xc
push dword [ebp + 0x18]
mov esi, dword [edi + 0x2c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040fe40
lea ecx, [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xc
push str._callfrom_1
call dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
mov dword [ebp + 0x18], eax
mov esi, dword [edi + 0x30]
add esp, 4
mov ecx, esp
mov byte [ebp - 0x20], 0x20
mov dword [ebp - 4], 0xe
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 8
push str._cpid_1
call dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
add esp, 8
mov dword [ebp + 0x18], eax
push dword [ebp + 0xc]
mov dword [ebp - 4], 0x10
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push ecx
mov ecx, esp
mov byte [ebp - 0x20], 0x20
push dword [ebp - 0x20]
mov esi, eax
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_unsigned_long_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x11
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
mov esi, dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
push 0xa
push str._module_1
call esi
mov dword [ebp + 0x18], eax
add esp, 4
mov byte [ebp - 0x20], 0x20
mov ecx, esp
mov dword [ebp - 4], 0x12
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0
push dword [ebp + 0x14]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call ebx
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x13
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xe
push str._clientname_1
call esi
mov dword [ebp + 0x18], eax
lea eax, [edi + 0x70]
mov dword [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.Qt5CoreKso.dll_public:_static_class_kso_qt::QString___cdecl_kso_qt::QString::fromStdWString_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
add esp, 0x10
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x15
push ecx
mov ecx, eax
call dword [sym.imp.Qt5CoreKso.dll__toLower_QString_kso_qt__QHAE_AV12_XZ]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x20], 0x20
push dword [ebp - 0x20]
mov byte [ebp - 4], 0x16
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call ebx
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x17
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp - 0x10]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xe
push str._restartapp_1
call dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
mov dword [ebp + 0x18], eax
mov esi, dword [edi + 0x38]
add esp, 4
mov ecx, esp
mov byte [ebp - 0x20], 0x20
mov dword [ebp - 4], 0x18
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x19
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
mov esi, dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
push 0xc
push str._platform_1
call esi
mov dword [ebp + 0x18], eax
add esp, 4
mov byte [ebp - 0x20], 0x20
mov ecx, esp
mov dword [ebp - 4], 0x1a
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push 0x20
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 9
push str._stage_1
call esi
mov dword [ebp + 0x18], eax
mov esi, dword [edi + 0xbc]
add esp, 4
mov ecx, esp
mov byte [ebp - 0x20], 0x20
mov dword [ebp - 4], 0x1c
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xa
push str._upload_1
call dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
mov dword [ebp + 0x18], eax
movzx esi, byte [edi + 0x34]
add esp, 4
mov ecx, esp
mov byte [ebp - 0x20], 0x20
mov dword [ebp - 4], 0x1e
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0xa
push 0
push esi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_class_kso_qt::QString___thiscall_kso_qt::QString::arg_int__int__int__class_kso_qt::QChar_]
mov esi, dword [ebp + 8]
mov ecx, esi
push eax
mov byte [ebp - 4], 0x1f
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
push 0xa
push str._dumpid_1
call dword [sym.imp.Qt5CoreKso.dll_private:_static_struct_kso_qt::QTypedArrayData_unsigned_short_int_____cdecl_kso_qt::QString::fromAscii_helper_char_const___int_]
mov dword [ebp + 0x18], eax
add esp, 4
mov byte [ebp - 0x20], 0x20
mov ecx, esp
mov dword [ebp - 4], 0x20
push dword [ebp - 0x20]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QChar::constructor_struct_kso_qt::QLatin1Char_]
push 0
push dword [ebp + 0x1c]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x18]
call ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x21
call fcn.0040fe40
lea ecx, [ebp - 0x1c]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
lea ecx, [ebp + 0x18]
call dword [sym.imp.Qt5CoreKso.dll_public:_void___thiscall_kso_qt::QString::destructor_void_]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret