Function at 0x140206040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x31], r9
movzx r14d, r8b
mov byte [rsp + 0x49], r8b
mov qword [rbp - 0x59], rdx
mov rsi, rcx
mov qword [rbp - 0x21], rcx
xor eax, eax
mov dword [rbp - 0x29], eax
mov dword [rbp + 7], 0x474e5089
mov dword [rsp + 0x50], 0x52444849
mov dword [rsp + 0x54], 0x54414449
mov dword [rsp + 0x58], 0x74584574
mov dword [rbp - 0x7d], 0x7445547a
mov dword [rbp - 1], 0x444e4549
mov dword [rbp + 3], 0x826042ae
mov byte [rsp + 0x48], al
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x41], rax
mov r12d, eax
mov dword [rbp - 0x69], eax
mov dword [rbp - 0x51], eax
mov r15d, eax
mov dword [rsp + 0x4c], eax
mov r13d, dword [rcx + 0x28]
imul r13d, dword [rcx + 0x48]
add r13d, r13d
mov dword [rbp - 0x65], r13d
mov edi, r13d
mov qword [rbp - 0x49], rdi
lea edx, [rax + 1]
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbx, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x140206604
mov r8d, edi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rbx
mov r8, qword [rbp - 0x31]
movzx edx, r14b
mov ecx, dword [rsi + 0x48]
call fcn.1401c1720
mov r9, rbx
test eax, eax
je 0x1402065d6
mov eax, dword [rbp + 7]
cmp eax, dword [rbx]
jne 0x1402065d6
cmp byte [0x1411dd026], r12b
jne 0x1402065c4
mov edi, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x54]
mov esi, dword [rsp + 0x58]
mov r14d, dword [rbp - 0x7d]
mov r15, qword [rbp - 1]
mov ecx, r12d
nop word [rax + rax]
cmp byte [rsp + 0x48], 0
jne 0x140206194
cmp rcx, 0xa00000
jg 0x1402065bc
cmp r12d, r13d
jne 0x140206205
mov rax, qword [rbp - 0x21]
mov r13d, dword [rax + 0x48]
mov ecx, dword [rax + 0x28]
imul ecx, r13d
mov rax, qword [rsp + 0x40]
cqo
idiv rcx
mov qword [rbp - 1], rdx
mov r12, qword [rbp - 0x31]
add r12, rax
mov r8, qword [rbp - 0x49]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x65]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x79]
mov r8, r12
movzx edx, byte [rsp + 0x49]
mov ecx, r13d
call fcn.1401c1720
mov r9, qword [rbp - 0x79]
test eax, eax
je 0x1402065ce
mov r12, qword [rbp - 1]
mov r13d, dword [rbp - 0x65]
mov ecx, r12d
mov qword [rbp - 1], rcx
cmp edi, dword [r9 + rcx]
jne 0x1402062a6
lea edx, [r12 + 8]
cmp edx, r13d
jae 0x140206256
lea ecx, [r12 + 4]
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x140206251
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x7d], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x7c], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x7b], al
movzx eax, byte [rcx]
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x7d]
jmp 0x140206253
mov eax, dword [rcx]
mov dword [rbp - 0x51], eax
lea eax, [r12 + 0xc]
cmp eax, r13d
jae 0x14020657b
mov ecx, edx
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x14020629b
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x58], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x80], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x7f], al
movzx eax, byte [rcx]
mov byte [rbp - 0x7e], al
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x4c], eax
jmp 0x14020657b
mov eax, dword [rcx]
mov dword [rsp + 0x4c], eax
jmp 0x14020657b
cmp esi, dword [r9 + rcx]
je 0x1402063bd
cmp r14d, dword [r9 + rcx]
je 0x1402063bd
cmp ebx, dword [r9 + rcx]
jne 0x14020657b
mov byte [rsp + 0x48], 1
mov qword [rbp - 0x41], 0
cmp rcx, 4
jb 0x140206319
cmp r12d, r13d
jae 0x140206319
lea ecx, [r12 - 4]
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x140206312
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x54], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x55], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x56], al
movzx eax, byte [rcx]
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x54]
jmp 0x140206314
mov eax, dword [rcx]
add qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x21]
mov r13d, dword [rax + 0x48]
mov ecx, dword [rax + 0x28]
imul ecx, r13d
mov rax, qword [rsp + 0x40]
cqo
idiv rcx
mov r12, qword [rbp - 0x31]
add r12, rax
mov qword [rbp - 1], rdx
mov r8, qword [rbp - 0x49]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x65]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x79]
mov r8, r12
movzx edx, byte [rsp + 0x49]
mov ecx, r13d
call fcn.1401c1720
test eax, eax
je 0x1402065ca
mov r12, qword [rbp - 1]
lea ecx, [r12 + 0xc]
add rcx, 8
cmp rcx, qword [rbp - 0x49]
jae 0x1402065bc
mov eax, r12d
mov r9, qword [rbp - 0x79]
cmp r15, qword [rax + r9 + 0xc]
je 0x1402065a8
cmp ebx, dword [rax + r9 + 0xc]
jne 0x1402065a8
dec r12d
mov rax, qword [rsp + 0x40]
dec rax
jmp 0x140206580
mov dword [rbp - 0x11], 0x61657243
mov dword [rbp - 0xd], 0x6e6f6974
mov dword [rbp - 9], 0x656d6954
xor r10b, r10b
mov dword [rbp + 7], 0x72756f53
mov word [rbp + 0xb], 0x6563
xor r8b, r8b
cmp rcx, 4
jb 0x14020642f
cmp r12d, r13d
jae 0x14020642f
lea ecx, [r12 - 4]
add rcx, r9
cmp byte [0x1411dd028], r8b
jne 0x140206426
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x50], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x51], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x52], al
movzx eax, byte [rcx]
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x50]
jmp 0x140206428
mov eax, dword [rcx]
mov dword [rbp - 0x69], eax
mov rcx, qword [rbp - 1]
lea eax, [r12 + 4]
mov qword [rbp - 0x19], rax
add rax, 0xd
mov edx, r13d
cmp rax, rdx
jae 0x14020657b
mov eax, dword [rbp + 7]
cmp eax, dword [r9 + rcx + 4]
jne 0x1402064e6
movzx eax, word [rbp + 0xb]
cmp ax, word [r9 + rcx + 8]
jne 0x1402064e6
cmp r8b, byte [r9 + rcx + 0xa]
jne 0x1402064e6
mov r13d, dword [rbp - 0x69]
add r13d, 0xfffffff9
je 0x14020657b
lea eax, [r13 + 1]
cdqe
mov qword [rbp - 0x71], rax
mov rdx, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x39], rax
test rax, rax
je 0x140206577
mov r8, qword [rbp - 0x71]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movsxd r13, r13d
mov rax, qword [rbp - 0x19]
add rax, 7
add rax, r13
cmp rax, qword [rbp - 0x49]
jae 0x1402064dd
mov rdx, qword [rbp - 1]
mov rcx, qword [rbp - 0x79]
add rcx, 0xb
add rdx, rcx
mov r8, r13
mov rcx, qword [rbp - 0x39]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x39]
jmp 0x140206572
mov rax, qword [rbp - 0x11]
cmp rax, qword [r9 + rcx + 4]
jne 0x14020657b
mov eax, dword [rbp - 9]
cmp eax, dword [r9 + rcx + 0xc]
jne 0x14020657b
cmp r10b, byte [r9 + rcx + 0x10]
jne 0x14020657b
mov r13d, dword [rbp - 0x69]
add r13d, 0xfffffff3
je 0x14020657b
lea eax, [r13 + 1]
cdqe
mov qword [rbp - 0x71], rax
mov rdx, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x61], rax
test rax, rax
je 0x140206577
mov r8, qword [rbp - 0x71]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movsxd r13, r13d
mov rax, qword [rbp - 0x19]
add rax, 0xd
add rax, r13
cmp rax, qword [rbp - 0x49]
jae 0x14020656e
mov rdx, qword [rbp - 1]
mov rcx, qword [rbp - 0x79]
add rcx, 0x11
add rdx, rcx
mov r8, r13
mov rcx, qword [rbp - 0x61]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x61]
mov byte [rax + r13], 0
mov r9, qword [rbp - 0x79]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x41]
inc rcx
mov qword [rbp - 0x41], rcx
inc r12d
inc rax
mov qword [rsp + 0x40], rax
cmp byte [0x1411dd026], 0
jne 0x1402065bc
mov r13d, dword [rbp - 0x65]
jmp 0x140206180
add qword [rsp + 0x40], 0x14
mov r12b, 1
mov r15d, dword [rsp + 0x4c]
mov r9, qword [rbp - 0x79]
jmp 0x1402065d6
xor r12b, r12b
mov r15d, dword [rsp + 0x4c]
mov r9, qword [rbp - 0x79]
jmp 0x1402065d6
mov r9, qword [rbp - 0x79]
xor r12b, r12b
mov r15d, dword [rsp + 0x4c]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x40]
cmp rcx, 0x1f400000
jle 0x140206626
mov rcx, qword [rbp - 0x59]
xor edx, edx
mov qword [rcx + 0x10], rdx
mov rax, qword [rcx + 0x71]
mov dword [rax], edx
mov rax, qword [rcx + 0x71]
mov dword [rax + 4], edx
xor al, al
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r12b, r12b
je 0x1402068b6
mov r13, qword [rbp - 0x59]
mov qword [r13 + 0x10], rcx
mov rax, qword [r13 + 0x71]
mov dword [rax + 4], ecx
lea rdx, [0x1402c8037]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
mov r14, qword [rbp - 0x61]
test r14, r14
je 0x14020675d
xor edx, edx
xor ecx, ecx
mov rax, r14
inc edx
cmp byte [rax], 0
je 0x140206677
inc ecx
inc rax
cmp ecx, 0x20
jb 0x140206666
xor esi, esi
mov ebx, edx
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdi, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
mov r9, rdi
mov rdx, r14
movabs r10, 0x400200100000000
movzx ecx, byte [rdx]
test cl, cl
je 0x1402066cf
cmp cl, 0x3a
ja 0x1402066b9
bt r10, rcx
jb 0x1402066c1
mov byte [r9], cl
inc esi
inc r9
inc r8d
inc rdx
cmp r8d, 0x20
jb 0x1402066a7
jmp 0x1402066d6
movsxd rax, esi
mov byte [rax + rdi], 0
mov qword [rbp - 0x61], 0
test rdi, rdi
je 0x1402066fb
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x1402066f0
jmp 0x140206700
mov eax, 0xffffffff
mov edx, eax
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x59], rax
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x11]
call fcn.1400fa750
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movabs rcx, 0x19254d3800
mov rax, qword [rbp - 0x61]
add rax, rcx
mov qword [rbp - 0x61], rax
mov dword [r13 + 0x41], eax
shr rax, 0x20
mov dword [r13 + 0x45], eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rbp - 0x39]
test rbx, rbx
je 0x14020677f
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, dword [rbp - 0x51]
test ebx, ebx
je 0x14020683e
test r15d, r15d
je 0x14020683e
cmp ebx, 0x2710
jae 0x14020683e
cmp r15d, 0x2710
jae 0x14020683e
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1402067cd
lea rdx, [0x1402f58a8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, ebx
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [0x140303db8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, r15d
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1402068b6
mov r8d, 0xa
mov rdx, qword [rbp - 0x31]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x29], 1
mov rdx, rdi
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, r12b
jmp 0x140206606