Function at 0x1401fa7a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x31], r9
movzx r14d, r8b
mov byte [rsp + 0x49], r8b
mov qword [rbp - 0x59], rdx
mov rsi, rcx
mov qword [rbp - 0x21], rcx
xor eax, eax
mov dword [rbp - 0x29], eax
mov dword [rbp + 7], 0x474e4d8a
mov dword [rsp + 0x50], 0x52444849
mov dword [rsp + 0x54], 0x54414449
mov dword [rsp + 0x58], 0x74584574
mov dword [rbp - 0x7d], 0x7445547a
mov dword [rbp - 1], 0x444e4549
mov dword [rbp + 3], 0x826042ae
mov byte [rsp + 0x48], al
mov qword [rsp + 0x40], rax
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x41], rax
mov r12d, eax
mov dword [rbp - 0x69], eax
mov dword [rbp - 0x51], eax
mov r15d, eax
mov dword [rsp + 0x4c], eax
mov r13d, dword [rcx + 0x28]
imul r13d, dword [rcx + 0x48]
add r13d, r13d
mov dword [rbp - 0x65], r13d
mov edi, r13d
mov qword [rbp - 0x49], rdi
lea edx, [rax + 1]
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbx, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x1401fad64
mov r8d, edi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rbx
mov r8, qword [rbp - 0x31]
movzx edx, r14b
mov ecx, dword [rsi + 0x48]
call fcn.1401c1720
mov r9, rbx
test eax, eax
je 0x1401fad36
mov eax, dword [rbp + 7]
cmp eax, dword [rbx]
jne 0x1401fad36
cmp byte [0x1411dd026], r12b
jne 0x1401fad24
mov edi, dword [rsp + 0x50]
mov ebx, dword [rsp + 0x54]
mov esi, dword [rsp + 0x58]
mov r14d, dword [rbp - 0x7d]
mov r15, qword [rbp - 1]
mov ecx, r12d
nop word [rax + rax]
cmp byte [rsp + 0x48], 0
jne 0x1401fa8f4
cmp rcx, 0xa00000
jg 0x1401fad1c
cmp r12d, r13d
jne 0x1401fa965
mov rax, qword [rbp - 0x21]
mov r13d, dword [rax + 0x48]
mov ecx, dword [rax + 0x28]
imul ecx, r13d
mov rax, qword [rsp + 0x40]
cqo
idiv rcx
mov qword [rbp - 1], rdx
mov r12, qword [rbp - 0x31]
add r12, rax
mov r8, qword [rbp - 0x49]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x65]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x79]
mov r8, r12
movzx edx, byte [rsp + 0x49]
mov ecx, r13d
call fcn.1401c1720
mov r9, qword [rbp - 0x79]
test eax, eax
je 0x1401fad2e
mov r12, qword [rbp - 1]
mov r13d, dword [rbp - 0x65]
mov ecx, r12d
mov qword [rbp - 1], rcx
cmp edi, dword [r9 + rcx]
jne 0x1401faa06
lea edx, [r12 + 8]
cmp edx, r13d
jae 0x1401fa9b6
lea ecx, [r12 + 4]
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x1401fa9b1
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x7d], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x7c], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x7b], al
movzx eax, byte [rcx]
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x7d]
jmp 0x1401fa9b3
mov eax, dword [rcx]
mov dword [rbp - 0x51], eax
lea eax, [r12 + 0xc]
cmp eax, r13d
jae 0x1401facdb
mov ecx, edx
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x1401fa9fb
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x58], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x80], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x7f], al
movzx eax, byte [rcx]
mov byte [rbp - 0x7e], al
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x4c], eax
jmp 0x1401facdb
mov eax, dword [rcx]
mov dword [rsp + 0x4c], eax
jmp 0x1401facdb
cmp esi, dword [r9 + rcx]
je 0x1401fab1d
cmp r14d, dword [r9 + rcx]
je 0x1401fab1d
cmp ebx, dword [r9 + rcx]
jne 0x1401facdb
mov byte [rsp + 0x48], 1
mov qword [rbp - 0x41], 0
cmp rcx, 4
jb 0x1401faa79
cmp r12d, r13d
jae 0x1401faa79
lea ecx, [r12 - 4]
add rcx, r9
cmp byte [0x1411dd028], 0
jne 0x1401faa72
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x54], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x55], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x56], al
movzx eax, byte [rcx]
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x54]
jmp 0x1401faa74
mov eax, dword [rcx]
add qword [rsp + 0x40], rax
mov rax, qword [rbp - 0x21]
mov r13d, dword [rax + 0x48]
mov ecx, dword [rax + 0x28]
imul ecx, r13d
mov rax, qword [rsp + 0x40]
cqo
idiv rcx
mov r12, qword [rbp - 0x31]
add r12, rax
mov qword [rbp - 1], rdx
mov r8, qword [rbp - 0x49]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x65]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x79]
mov r8, r12
movzx edx, byte [rsp + 0x49]
mov ecx, r13d
call fcn.1401c1720
test eax, eax
je 0x1401fad2a
mov r12, qword [rbp - 1]
lea ecx, [r12 + 0xc]
add rcx, 8
cmp rcx, qword [rbp - 0x49]
jae 0x1401fad1c
mov eax, r12d
mov r9, qword [rbp - 0x79]
cmp r15, qword [rax + r9 + 0xc]
je 0x1401fad08
cmp ebx, dword [rax + r9 + 0xc]
jne 0x1401fad08
dec r12d
mov rax, qword [rsp + 0x40]
dec rax
jmp 0x1401face0
mov dword [rbp - 0x11], 0x61657243
mov dword [rbp - 0xd], 0x6e6f6974
mov dword [rbp - 9], 0x656d6954
xor r10b, r10b
mov dword [rbp + 7], 0x72756f53
mov word [rbp + 0xb], 0x6563
xor r8b, r8b
cmp rcx, 4
jb 0x1401fab8f
cmp r12d, r13d
jae 0x1401fab8f
lea ecx, [r12 - 4]
add rcx, r9
cmp byte [0x1411dd028], r8b
jne 0x1401fab86
movzx eax, byte [rcx + 3]
mov byte [rsp + 0x50], al
movzx eax, byte [rcx + 2]
mov byte [rsp + 0x51], al
movzx eax, byte [rcx + 1]
mov byte [rsp + 0x52], al
movzx eax, byte [rcx]
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x50]
jmp 0x1401fab88
mov eax, dword [rcx]
mov dword [rbp - 0x69], eax
mov rcx, qword [rbp - 1]
lea eax, [r12 + 4]
mov qword [rbp - 0x19], rax
add rax, 0xd
mov edx, r13d
cmp rax, rdx
jae 0x1401facdb
mov eax, dword [rbp + 7]
cmp eax, dword [r9 + rcx + 4]
jne 0x1401fac46
movzx eax, word [rbp + 0xb]
cmp ax, word [r9 + rcx + 8]
jne 0x1401fac46
cmp r8b, byte [r9 + rcx + 0xa]
jne 0x1401fac46
mov r13d, dword [rbp - 0x69]
add r13d, 0xfffffff9
je 0x1401facdb
lea eax, [r13 + 1]
cdqe
mov qword [rbp - 0x71], rax
mov rdx, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x39], rax
test rax, rax
je 0x1401facd7
mov r8, qword [rbp - 0x71]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movsxd r13, r13d
mov rax, qword [rbp - 0x19]
add rax, 7
add rax, r13
cmp rax, qword [rbp - 0x49]
jae 0x1401fac3d
mov rdx, qword [rbp - 1]
mov rcx, qword [rbp - 0x79]
add rcx, 0xb
add rdx, rcx
mov r8, r13
mov rcx, qword [rbp - 0x39]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x39]
jmp 0x1401facd2
mov rax, qword [rbp - 0x11]
cmp rax, qword [r9 + rcx + 4]
jne 0x1401facdb
mov eax, dword [rbp - 9]
cmp eax, dword [r9 + rcx + 0xc]
jne 0x1401facdb
cmp r10b, byte [r9 + rcx + 0x10]
jne 0x1401facdb
mov r13d, dword [rbp - 0x69]
add r13d, 0xfffffff3
je 0x1401facdb
lea eax, [r13 + 1]
cdqe
mov qword [rbp - 0x71], rax
mov rdx, rax
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rbp - 0x61], rax
test rax, rax
je 0x1401facd7
mov r8, qword [rbp - 0x71]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movsxd r13, r13d
mov rax, qword [rbp - 0x19]
add rax, 0xd
add rax, r13
cmp rax, qword [rbp - 0x49]
jae 0x1401facce
mov rdx, qword [rbp - 1]
mov rcx, qword [rbp - 0x79]
add rcx, 0x11
add rdx, rcx
mov r8, r13
mov rcx, qword [rbp - 0x61]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x61]
mov byte [rax + r13], 0
mov r9, qword [rbp - 0x79]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x41]
inc rcx
mov qword [rbp - 0x41], rcx
inc r12d
inc rax
mov qword [rsp + 0x40], rax
cmp byte [0x1411dd026], 0
jne 0x1401fad1c
mov r13d, dword [rbp - 0x65]
jmp 0x1401fa8e0
add qword [rsp + 0x40], 0x20
mov r12b, 1
mov r15d, dword [rsp + 0x4c]
mov r9, qword [rbp - 0x79]
jmp 0x1401fad36
xor r12b, r12b
mov r15d, dword [rsp + 0x4c]
mov r9, qword [rbp - 0x79]
jmp 0x1401fad36
mov r9, qword [rbp - 0x79]
xor r12b, r12b
mov r15d, dword [rsp + 0x4c]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x40]
cmp rcx, 0x1f400000
jle 0x1401fad86
mov rcx, qword [rbp - 0x59]
xor edx, edx
mov qword [rcx + 0x10], rdx
mov rax, qword [rcx + 0x71]
mov dword [rax], edx
mov rax, qword [rcx + 0x71]
mov dword [rax + 4], edx
xor al, al
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r12b, r12b
je 0x1401fb016
mov r13, qword [rbp - 0x59]
mov qword [r13 + 0x10], rcx
mov rax, qword [r13 + 0x71]
mov dword [rax + 4], ecx
lea rdx, [0x1402c8037]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
mov r14, qword [rbp - 0x61]
test r14, r14
je 0x1401faebd
xor edx, edx
xor ecx, ecx
mov rax, r14
inc edx
cmp byte [rax], 0
je 0x1401fadd7
inc ecx
inc rax
cmp ecx, 0x20
jb 0x1401fadc6
xor esi, esi
mov ebx, edx
lea ecx, [rsi + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdi, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
mov r9, rdi
mov rdx, r14
movabs r10, 0x400200100000000
movzx ecx, byte [rdx]
test cl, cl
je 0x1401fae2f
cmp cl, 0x3a
ja 0x1401fae19
bt r10, rcx
jb 0x1401fae21
mov byte [r9], cl
inc esi
inc r9
inc r8d
inc rdx
cmp r8d, 0x20
jb 0x1401fae07
jmp 0x1401fae36
movsxd rax, esi
mov byte [rax + rdi], 0
mov qword [rbp - 0x61], 0
test rdi, rdi
je 0x1401fae5b
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x1401fae50
jmp 0x1401fae60
mov eax, 0xffffffff
mov edx, eax
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x59], rax
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x11]
call fcn.1400fa750
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movabs rcx, 0x19254d3800
mov rax, qword [rbp - 0x61]
add rax, rcx
mov qword [rbp - 0x61], rax
mov dword [r13 + 0x41], eax
shr rax, 0x20
mov dword [r13 + 0x45], eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rbp - 0x39]
test rbx, rbx
je 0x1401faedf
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, dword [rbp - 0x51]
test ebx, ebx
je 0x1401faf9e
test r15d, r15d
je 0x1401faf9e
cmp ebx, 0x2710
jae 0x1401faf9e
cmp r15d, 0x2710
jae 0x1401faf9e
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401faf2d
lea rdx, [0x1402f58a8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, ebx
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [0x140303db8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, r15d
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401fb016
mov r8d, 0xa
mov rdx, qword [rbp - 0x31]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x29], 1
mov rdx, rdi
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x59]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, r12b
jmp 0x1401fad66