Function at 0x1402213e0
Capabilities:
Timestomp file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r14, r8
mov rbx, rdx
mov r15, rcx
test byte [rdx + 0x56], 4
jne 0x1402215e0
movzx eax, byte [rcx + 0x16]
cmp al, 7
jne 0x14022146d
mov rax, qword [rdx + 0x4d]
cmp rax, 0xfffffe
jne 0x140221458
mov ecx, dword [rdx + 0x45]
mov eax, dword [rdx + 0x41]
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x55], ecx
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, dword [rbx + 0x3d]
mov eax, dword [rbx + 0x39]
jmp 0x140221600
lea rcx, [rbp - 0x21]
test rax, rax
je 0x140221475
mov r8d, dword [rdx + 0x45]
mov edx, dword [rdx + 0x41]
jmp 0x140221575
cmp al, 0xa
jne 0x14022148e
lea rcx, [rbp - 0x21]
mov edx, dword [rdx + 0x41]
call fcn.1400fa8d0
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400fa8d0
jmp 0x140221614
cmp al, 6
jne 0x1402214fc
mov rax, qword [rdx + 0x4d]
mov r8d, dword [rdx + 0x45]
cmp rax, 0xfffffe
jne 0x1402214c5
mov eax, dword [rdx + 0x41]
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x55], r8d
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, dword [rbx + 0x3d]
mov eax, dword [rbx + 0x39]
jmp 0x140221600
test rax, rax
je 0x1402214d2
mov edx, dword [rdx + 0x41]
jmp 0x140221571
test r8d, r8d
je 0x140221614
mov edx, dword [rdx + 0x41]
lea rcx, [rbp - 0x21]
call fcn.1400faf80
mov r8d, dword [rbx + 0x3d]
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400faf80
jmp 0x140221614
cmp al, 2
jne 0x140221516
mov r8d, dword [rdx + 0x45]
mov edx, dword [rdx + 0x41]
cmp qword [rbx + 0x4d], 0xfffffe
jne 0x140221571
mov dword [rbp - 0x59], edx
jmp 0x1402214a8
cmp al, 3
jne 0x14022155b
mov rax, qword [rdx + 0x4d]
cmp rax, 0xfffffe
je 0x140221433
lea rcx, [rbp - 0x21]
test rax, rax
je 0x14022153c
mov r8d, dword [rdx + 0x45]
mov edx, dword [rdx + 0x41]
jmp 0x140221575
xor r8d, r8d
mov edx, dword [rdx + 0x41]
call fcn.1400faf20
xor r8d, r8d
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400faf20
jmp 0x140221614
cmp al, 4
jne 0x14022159a
mov eax, dword [rdx + 0x45]
mov ecx, dword [rdx + 0x41]
cmp qword [rdx + 0x4d], 0
je 0x14022158f
mov r8d, eax
mov edx, ecx
lea rcx, [rbp - 0x21]
call fcn.1400faa70
mov r8d, dword [rbx + 0x3d]
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400faa70
jmp 0x140221614
mov dword [rbp - 0x59], ecx
mov dword [rbp - 0x55], eax
jmp 0x14022143f
cmp al, 5
jne 0x140221614
movzx eax, byte [rdx + 0x66]
and al, 0xf
lea rcx, [rbp - 0x21]
cmp al, 5
jne 0x1402215c2
mov edx, dword [rdx + 0x39]
call fcn.1400fa500
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400fa500
jmp 0x140221614
mov r8d, dword [rdx + 0x45]
mov edx, dword [rdx + 0x41]
call fcn.1400fab30
mov r8d, dword [rbx + 0x3d]
mov edx, dword [rbx + 0x39]
lea rcx, [rbp - 0x11]
call fcn.1400fab30
jmp 0x140221614
mov ecx, dword [rdx + 0x45]
mov eax, dword [rdx + 0x41]
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x55], ecx
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, dword [rbx + 0x45]
mov eax, dword [rbx + 0x41]
mov dword [rbp - 0x55], ecx
mov dword [rbp - 0x59], eax
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor r12d, r12d
mov word [rbp - 0x1d], r12w
mov word [rbp - 0x13], r12w
mov word [rbp - 0xd], r12w
mov word [rbp - 3], r12w
mov word [rbp + 3], r12w
mov word [rbp + 0xd], r12w
mov esi, r12d
test r14, r14
je 0x140221679
lea rcx, [rbp - 0x51]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_void____ptr64]
mov ebx, r12d
mov rdi, r14
nop dword [rax]
movzx eax, word [rdi]
mov word [rbp - 0x51], ax
mov word [rbp - 0x49], ax
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_bool___cdecl_QChar::isNull_void_const___ptr64]
test al, al
jne 0x140221679
inc esi
inc ebx
add rdi, 2
cmp ebx, 0xff
jb 0x140221650
mov r8d, esi
mov rdx, r14
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::constructor_class_QChar_const____ptr64__int____ptr64]
nop
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_QString::toStdWString_void____ptr64]
cmp qword [rax + 0x18], 8
jb 0x1402216a2
mov rax, qword [rax]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
sete dil
mov rdx, qword [rbp + 0x27]
cmp rdx, 8
jb 0x140221716
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140221711
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140221711
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1402b2268
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 7
mov word [rbp + 0xf], r12w
test dil, dil
jne 0x1402217c4
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movzx ecx, byte [r15 + 0x16]
cmp cl, 2
jne 0x140221777
mov rax, qword [0x1411dc8d0]
cmp byte [rax + 0x2b], cl
jne 0x140221772
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x1402217a5
xor r8d, r8d
jmp 0x1402217a9
cmp cl, 0xa
ja 0x140221786
mov edx, 0x4d8
bt edx, ecx
jb 0x140221762
cmp cl, 5
jne 0x1402217ba
lea rdx, [rbp - 0x41]
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x41], rax
mov qword [rbp - 0x31], rax
lea r8, [rbp - 0x41]
lea r9, [rbp - 0x39]
lea rdx, [rbp - 0x31]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1402b25d0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret