Function at 0x1401dee40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov qword [rbp - 0x70], r9
movzx edi, r8b
mov r15, rdx
mov qword [rsp + 0x70], rdx
mov rbx, rcx
xor r14d, r14d
mov dword [rbp - 0x64], r14d
xor r12b, r12b
mov dword [rbp - 0x58], 0x50414548
mov dword [rbp - 0x54], 0x52444343
mov dword [rbp - 0x60], 0x221031
mov word [rbp - 0x5c], r14w
mov word [rsp + 0x40], 0x4949
mov word [rsp + 0x5c], 0x1810
mov word [rsp + 0x60], 0x2807
mov word [rsp + 0x58], 0x816
mov word [rsp + 0x64], 0x2007
mov word [rsp + 0x68], 0x2008
mov word [rsp + 0x54], 0x300a
mov word [rsp + 0x48], 0x300b
mov dword [rbp - 0x80], r14d
mov dword [rsp + 0x78], r14d
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x7c], r14d
mov dword [rsp + 0x4c], r14d
mov dword [rbp - 0x68], r14d
mov dword [rbp - 0x78], r14d
mov dword [rbp - 0x74], r14d
lea edx, [r14 + 1]
mov ecx, 0x1400000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rsi, rax
test rax, rax
je 0x1401df787
xor eax, eax
mov dword [rsi], eax
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x1400000
mov r9, rsi
mov r8, qword [rbp - 0x70]
movzx edx, dil
mov ecx, dword [rbx + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401df77e
movzx eax, word [rsp + 0x40]
cmp ax, word [rsi]
jne 0x1401df77e
movzx r14d, byte [0x1411dd028]
test r14b, r14b
je 0x1401def86
movzx eax, byte [rsi + 5]
mov byte [rsp + 0x44], al
movzx eax, byte [rsi + 4]
mov byte [rsp + 0x45], al
movzx eax, byte [rsi + 3]
mov byte [rsp + 0x46], al
movzx eax, byte [rsi + 2]
mov byte [rsp + 0x47], al
mov ebx, dword [rsp + 0x44]
jmp 0x1401def89
mov ebx, dword [rsi + 2]
mov dword [rsp + 0x44], ebx
mov rax, qword [rbp - 0x58]
cmp rax, qword [rsi + 6]
jne 0x1401df77e
mov r12b, 1
mov byte [rsp + 0x40], r12b
mov r13d, ebx
cmp byte [0x1411dd026], 0
jne 0x1401df6c3
movzx edx, word [rbp - 0x5c]
mov r8d, dword [rbp - 0x60]
nop dword [rax + rax]
mov ecx, r13d
lea rax, [rcx + 6]
cmp rax, 0x1400000
jae 0x1401df6c3
cmp r8d, dword [rcx + rsi]
jne 0x1401defe0
cmp dx, word [rcx + rsi + 4]
je 0x1401defe5
inc r13d
jmp 0x1401defc0
add r13d, 6
lea edi, [r13 + 2]
mov dword [rsp + 0x50], edi
lea r15d, [r13 + 6]
lea r12d, [r13 + 0xa]
movzx eax, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x60]
movzx r11d, word [rsp + 0x58]
movzx edx, word [rsp + 0x64]
movzx r8d, word [rsp + 0x68]
movzx r9d, word [rsp + 0x54]
movzx r10d, word [rsp + 0x48]
cmp edi, 0x1400000
jae 0x1401df329
mov ebx, r13d
add rbx, rsi
cmp r11w, word [rbx]
jne 0x1401df08f
cmp r12d, 0x1400000
jae 0x1401df309
mov edi, r15d
add rdi, rsi
test r14b, r14b
je 0x1401df080
movzx ebx, byte [rdi + 3]
mov byte [rsp + 0x48], bl
movzx ebx, byte [rdi + 2]
mov byte [rsp + 0x49], bl
movzx ebx, byte [rdi + 1]
mov byte [rsp + 0x4a], bl
movzx ebx, byte [rdi]
mov byte [rsp + 0x4b], bl
mov ebx, dword [rsp + 0x48]
mov dword [rsp + 0x7c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
mov ebx, dword [rdi]
mov dword [rsp + 0x7c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
cmp ax, word [rbx]
jne 0x1401df0eb
cmp r12d, 0x1400000
jae 0x1401df309
mov edi, r15d
add rdi, rsi
test r14b, r14b
je 0x1401df0dc
movzx ebx, byte [rdi + 3]
mov byte [rsp + 0x68], bl
movzx ebx, byte [rdi + 2]
mov byte [rsp + 0x69], bl
movzx ebx, byte [rdi + 1]
mov byte [rsp + 0x6a], bl
movzx ebx, byte [rdi]
mov byte [rsp + 0x6b], bl
mov ebx, dword [rsp + 0x68]
mov dword [rsp + 0x4c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
mov ebx, dword [rdi]
mov dword [rsp + 0x4c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
cmp cx, word [rbx]
jne 0x1401df145
cmp r12d, 0x1400000
jae 0x1401df309
mov edi, r15d
add rdi, rsi
test r14b, r14b
je 0x1401df137
movzx ebx, byte [rdi + 3]
mov byte [rsp + 0x64], bl
movzx ebx, byte [rdi + 2]
mov byte [rsp + 0x65], bl
movzx ebx, byte [rdi + 1]
mov byte [rsp + 0x66], bl
movzx ebx, byte [rdi]
mov byte [rsp + 0x67], bl
mov ebx, dword [rsp + 0x64]
mov dword [rbp - 0x7c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
mov ebx, dword [rdi]
mov dword [rbp - 0x7c], ebx
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
cmp dx, word [rbx]
jne 0x1401df218
cmp r12d, 0x1400000
jae 0x1401df1a9
mov edi, r15d
add rdi, rsi
test r14b, r14b
je 0x1401df196
movzx ebx, byte [rdi + 3]
mov byte [rsp + 0x60], bl
movzx ebx, byte [rdi + 2]
mov byte [rsp + 0x61], bl
movzx ebx, byte [rdi + 1]
mov byte [rsp + 0x62], bl
movzx ebx, byte [rdi]
mov byte [rsp + 0x63], bl
mov edi, dword [rsp + 0x60]
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov dword [rbx], edi
mov edi, dword [rsp + 0x50]
jmp 0x1401df1ae
mov edi, dword [rdi]
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov dword [rbx], edi
mov edi, dword [rsp + 0x50]
jmp 0x1401df1ae
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov r9d, dword [rsp + 0x44]
add dword [rbx], r9d
cmp r15d, 0x1400000
movzx r9d, word [rsp + 0x54]
jae 0x1401df2de
add rdi, rsi
cmp byte [0x1411dd028], 0
je 0x1401df1fe
movzx ebx, byte [rdi + 3]
mov byte [rsp + 0x5c], bl
movzx ebx, byte [rdi + 2]
mov byte [rsp + 0x5d], bl
movzx ebx, byte [rdi + 1]
mov byte [rsp + 0x5e], bl
movzx ebx, byte [rdi]
mov byte [rsp + 0x5f], bl
mov edi, dword [rsp + 0x5c]
jmp 0x1401df200
mov edi, dword [rdi]
mov rbx, qword [r14 + 0x71]
mov dword [rbx + 4], edi
movzx r14d, byte [0x1411dd028]
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
cmp r8w, word [rbx]
jne 0x1401df2e8
cmp r12d, 0x1400000
jae 0x1401df27a
mov edi, r15d
add rdi, rsi
test r14b, r14b
je 0x1401df266
movzx ebx, byte [rdi + 3]
mov byte [rbp - 0x58], bl
movzx ebx, byte [rdi + 2]
mov byte [rbp - 0x57], bl
movzx ebx, byte [rdi + 1]
mov byte [rbp - 0x56], bl
movzx ebx, byte [rdi]
mov byte [rbp - 0x55], bl
mov edi, dword [rbp - 0x58]
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov dword [rbx + 8], edi
mov edi, dword [rsp + 0x50]
jmp 0x1401df27f
mov edi, dword [rdi]
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov dword [rbx + 8], edi
mov edi, dword [rsp + 0x50]
jmp 0x1401df27f
mov r14, qword [rsp + 0x70]
mov rbx, qword [r14 + 0x71]
mov r11d, dword [rsp + 0x44]
add dword [rbx + 8], r11d
cmp r15d, 0x1400000
movzx r11d, word [rsp + 0x58]
jae 0x1401df2de
add rdi, rsi
cmp byte [0x1411dd028], 0
je 0x1401df2c7
movzx ebx, byte [rdi + 3]
mov byte [rbp - 0x60], bl
movzx ebx, byte [rdi + 2]
mov byte [rbp - 0x5f], bl
movzx ebx, byte [rdi + 1]
mov byte [rbp - 0x5e], bl
movzx ebx, byte [rdi]
mov byte [rbp - 0x5d], bl
mov edi, dword [rbp - 0x60]
jmp 0x1401df2c9
mov edi, dword [rdi]
mov rbx, qword [r14 + 0x71]
mov dword [rbx + 0xc], edi
movzx r14d, byte [0x1411dd028]
mov edi, dword [rsp + 0x50]
jmp 0x1401df309
movzx r14d, byte [0x1411dd028]
jmp 0x1401df309
cmp r10w, word [rbx]
jne 0x1401df2ff
add r13d, 6
add r12d, 6
add r15d, 6
add edi, 6
jmp 0x1401df309
cmp r9w, word [rbx]
je 0x1401df451
add r13d, 0xa
add r12d, 0xa
add r15d, 0xa
add edi, 0xa
mov dword [rsp + 0x50], edi
cmp byte [0x1411dd026], 0
je 0x1401df020
mov ebx, dword [rsp + 0x44]
mov r15, qword [rsp + 0x70]
mov ecx, dword [rsp + 0x7c]
lea eax, [rbx + rcx]
mov r12d, dword [rbp - 0x80]
add eax, r12d
mov r9d, 0x80
mov edi, dword [rsp + 0x4c]
cmp eax, 0x1400000
jae 0x1401df3e1
cmp edi, r9d
cmova edi, r9d
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea eax, [rdi - 4]
add eax, ebx
add eax, ecx
add eax, r12d
cmp eax, 0x1400000
jae 0x1401df3af
lea r8d, [rdi - 4]
mov eax, ebx
lea rdx, [rsi + rcx]
add rdx, rax
add rdx, r12
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov r9d, 0x80
lea eax, [rdi - 4]
mov ecx, eax
cmp rcx, r9
jae 0x1401df7ab
mov byte [rbp + rax - 0x50], 0
lea rdx, [rbp - 0x50]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
movzx r14d, byte [0x1411dd028]
mov r9d, 0x80
lea edx, [rbx + rdi]
add edx, r12d
lea eax, [rdx + 8]
cmp eax, 0x1400000
jae 0x1401df534
mov ecx, edx
add rcx, rsi
add edx, 4
test r14b, r14b
je 0x1401df529
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x60], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x5f], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x5e], al
movzx eax, byte [rcx]
mov byte [rbp - 0x5d], al
mov ecx, edx
add rcx, rsi
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x4c], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x4d], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x4e], al
movzx eax, byte [rcx]
mov byte [rsp + 0x4f], al
mov edx, dword [rsp + 0x4c]
mov eax, dword [rbp - 0x60]
jmp 0x1401df52e
lea edx, [r13 + 0xa]
cmp edx, 0x1400000
jae 0x1401df48e
lea ecx, [r13 + 6]
add rcx, rsi
test r14b, r14b
je 0x1401df489
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x60], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x5f], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x5e], al
movzx eax, byte [rcx]
mov byte [rbp - 0x5d], al
mov eax, dword [rbp - 0x60]
jmp 0x1401df48b
mov eax, dword [rcx]
mov dword [rbp - 0x80], eax
lea eax, [r13 + 0xe]
cmp eax, 0x1400000
jae 0x1401df4c9
mov ecx, edx
add rcx, rsi
test r14b, r14b
je 0x1401df4c3
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x60], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x5f], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x5e], al
movzx eax, byte [rcx]
mov byte [rbp - 0x5d], al
mov eax, dword [rbp - 0x60]
jmp 0x1401df4c5
mov eax, dword [rcx]
mov dword [rsp + 0x78], eax
mov ebx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x78]
add edx, ebx
lea eax, [rdx + 2]
cmp eax, 0x1400000
jae 0x1401df506
test r14b, r14b
je 0x1401df4fd
movzx eax, byte [rdx + rsi + 1]
mov byte [rsp + 0x48], al
movzx eax, byte [rdx + rsi]
mov byte [rsp + 0x49], al
movzx eax, word [rsp + 0x48]
movzx eax, ax
jmp 0x1401df509
movzx eax, word [rdx + rsi]
movzx eax, ax
jmp 0x1401df509
mov eax, dword [rbp - 0x68]
lea eax, [rax + rax*4]
add eax, eax
lea ecx, [rdx + 6]
add ecx, eax
mov r15, qword [rsp + 0x70]
mov qword [r15 + 0x10], rcx
movzx r14d, byte [0x1411dd028]
jmp 0x1401df332
mov edx, dword [rdx + rsi]
mov eax, dword [rcx]
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x74], edx
mov r13d, dword [rbp - 0x7c]
lea ecx, [rbx + r13]
add ecx, r12d
lea eax, [rcx + 0x80]
cmp eax, 0x1400000
jae 0x1401df5fa
add ecx, 0x20
mov r8d, 0xffffffe0
sub r8d, ebx
sub r8d, r13d
sub r8d, r12d
xor r14d, r14d
cmp ecx, 0x1400000
jae 0x1401df581
inc r14d
cmp byte [rcx + rsi], 0
je 0x1401df581
inc ecx
lea eax, [r8 + rcx]
cmp eax, r9d
jl 0x1401df565
cmp r14d, r9d
jge 0x1401df5fa
lea eax, [r14 + 1]
movsxd rbx, eax
mov rdx, rbx
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [rsp + 0x44]
lea eax, [rcx + 0x20]
add eax, r14d
add eax, r13d
add eax, r12d
cmp eax, 0x1400000
jae 0x1401df5dc
movsxd r8, r14d
lea rdx, [rsi + r13]
add rdx, rcx
lea rax, [r12 + 0x20]
add rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
test rdi, rdi
je 0x1401df5fa
mov rdx, rdi
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, dword [rbp - 0x78]
test ebx, ebx
je 0x1401df6bd
mov edi, dword [rbp - 0x74]
test edi, edi
je 0x1401df6bd
cmp ebx, 0x2710
jae 0x1401df6bd
cmp edi, 0x2710
jae 0x1401df6bd
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401df649
lea rdx, [0x1402f58a8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, ebx
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [0x140303db8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, edi
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx r12d, byte [rsp + 0x40]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401df73d
mov r8d, 0xa
mov rdx, qword [rbp - 0x70]
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x70]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x64], 1
mov rdx, rdi
lea rcx, [rbp - 0x70]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, qword [r15 + 0x71]
cmp dword [rcx], 0
jne 0x1401df74d
mov eax, dword [r15 + 0x10]
mov dword [rcx + 4], eax
cmp qword [r15 + 0x10], 0
jne 0x1401df77e
mov rax, qword [r15 + 0x71]
mov ecx, dword [rax + 4]
test ecx, ecx
jne 0x1401df764
cmp dword [rax + 0xc], ecx
je 0x1401df77e
mov edx, dword [rax + 0xc]
cmp ecx, edx
jbe 0x1401df775
mov eax, dword [rax]
add eax, ecx
mov qword [r15 + 0x10], rax
jmp 0x1401df77e
mov ecx, dword [rax + 8]
add ecx, edx
mov qword [r15 + 0x10], rcx
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r12b
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1402b28dc
int3