Function at 0x1401e6af0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 7], rax
mov rdi, r9
mov qword [rbp - 0x21], r9
mov byte [rbp - 0x75], r8b
mov qword [rbp - 0x39], rdx
mov r14, rcx
mov qword [rbp - 0x31], rcx
xor edx, edx
mov dword [rbp - 0x19], edx
mov byte [rbp - 0x6d], dl
mov dword [rbp - 1], 0x38464947
mov word [rbp + 3], 0x6139
mov dword [rbp - 9], 0x38464947
mov word [rbp - 5], 0x6137
mov word [rbp - 0x55], 0x3b00
mov word [rbp - 0x51], 0x3c00
mov word [rbp - 0x61], 0xf921
mov r15b, 0x2c
mov word [rbp - 0x5d], 0x121
mov word [rbp - 0x59], 0xff21
mov word [rbp - 0x65], 0xfe21
mov dword [rbp - 0x79], edx
mov dword [rbp - 0x4d], edx
mov dword [rbp - 0x29], edx
mov dword [rbp - 0x25], edx
mov dword [rbp - 0x49], edx
mov r12d, edx
mov eax, dword [rcx + 0x28]
imul eax, dword [rcx + 0x48]
lea esi, [rax + rax*2]
mov dword [rbp - 0x71], esi
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x41], rax
mov ebx, esi
mov qword [rbp - 0x11], rbx
mov edx, 1
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r13, rax
test rax, rax
je 0x1401e71d0
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor ebx, ebx
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], esi
mov r9, r13
mov r8, rdi
movzx edx, byte [rbp - 0x75]
mov ecx, dword [r14 + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401e71c6
mov eax, dword [rbp - 1]
cmp eax, dword [r13]
jne 0x1401e6c28
movzx eax, word [rbp + 3]
cmp ax, word [r13 + 4]
jne 0x1401e6c28
mov eax, dword [rbp - 9]
cmp eax, dword [r13]
jne 0x1401e6c28
movzx eax, word [rbp - 5]
cmp ax, word [r13 + 4]
je 0x1401e71c6
mov byte [rbp - 0x6d], 1
movzx ecx, byte [0x1411dd028]
cmp esi, 8
jbe 0x1401e6c5d
test cl, cl
je 0x1401e6c52
movzx eax, byte [r13 + 7]
mov byte [rbp - 0x69], al
movzx eax, byte [r13 + 6]
mov byte [rbp - 0x68], al
movzx eax, word [rbp - 0x69]
jmp 0x1401e6c57
movzx eax, word [r13 + 6]
movzx eax, ax
mov dword [rbp - 0x29], eax
cmp esi, 0xa
jbe 0x1401e6e05
test cl, cl
je 0x1401e6c80
movzx eax, byte [r13 + 9]
mov byte [rbp - 0x69], al
movzx eax, byte [r13 + 8]
mov byte [rbp - 0x68], al
movzx eax, word [rbp - 0x69]
jmp 0x1401e6c85
movzx eax, word [r13 + 8]
movzx eax, ax
mov dword [rbp - 0x25], eax
movzx ebx, byte [r13 + 0xa]
test ebx, ebx
je 0x1401e6df5
mov r8d, 2
mov edx, ebx
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
mov rdx, rax
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov r8d, 1
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::left_int____ptr64]
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::toInt_bool____ptr64__int_const___ptr64]
mov edi, eax
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [rbp - 0x41]
cmp dword [rax + 4], 7
je 0x1401e6df5
cmp edi, 1
jne 0x1401e6ded
and ebx, 7
lea ecx, [rbx + 1]
mov r12d, 3
shl r12d, cl
add r12d, 0xd
mov dword [rbp - 0x79], r12d
mov r8d, esi
xor edx, edx
mov rcx, r13
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [r14 + 0x48]
mov r8d, ecx
imul r8d, dword [r14 + 0x28]
xor edx, edx
mov eax, r12d
div r8d
mov r12d, edx
mov r8d, eax
add r8, qword [rbp - 0x21]
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, r13
movzx edx, byte [rbp - 0x75]
call fcn.1401c1720
test eax, eax
je 0x1401e705f
mov edx, dword [rbp - 0x79]
cmp byte [0x1411dd026], 0
jne 0x1401e705f
movzx ebx, word [rbp - 0x61]
movzx r14d, word [rbp - 0x5d]
movzx esi, word [rbp - 0x59]
movzx edi, word [rbp - 0x65]
mov r10d, dword [rbp - 0x71]
mov eax, dword [rbp - 0x49]
nop word [rax + rax]
lea r8d, [r12 + 2]
cmp r8d, r10d
jae 0x1401e705f
cmp eax, r10d
ja 0x1401e705f
mov ecx, r12d
add rcx, r13
cmp si, word [rcx]
je 0x1401e71fe
cmp r14w, word [rcx]
je 0x1401e71fe
cmp di, word [rcx]
je 0x1401e71fe
cmp bx, word [rcx]
jne 0x1401e6e0c
add edx, 8
mov dword [rbp - 0x79], edx
add r12d, 8
jmp 0x1401e735a
test edi, edi
jne 0x1401e6d6d
mov edx, 0xd
mov dword [rbp - 0x79], edx
mov r12d, edx
jmp 0x1401e6d70
mov edx, ebx
jmp 0x1401e6d70
cmp r15b, byte [rcx]
jne 0x1401e7031
lea eax, [r12 - 1]
cmp byte [rax + r13], 0
je 0x1401e6e31
lea eax, [r12 + 1]
cmp byte [rax + r13], 0
jne 0x1401e735a
xor r8d, r8d
add r12d, 9
cmp r12d, r10d
jae 0x1401e6e47
movzx eax, byte [r12 + r13]
mov dword [rbp - 0x4d], eax
jmp 0x1401e6e4a
mov eax, dword [rbp - 0x4d]
test eax, eax
je 0x1401e6ec8
mov r8d, 2
mov edx, eax
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
mov rdx, rax
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 9]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov r8d, 1
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::left_int____ptr64]
nop
xor edx, edx
lea r8d, [rdx + 0xa]
mov rcx, rax
call qword [sym.imp.Qt5Core.dll_public:_int___cdecl_QString::toInt_bool____ptr64__int_const___ptr64]
mov dword [rbp - 0x65], eax
lea rcx, [rbp - 1]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [rbp - 0x41]
cmp dword [rax + 4], 7
jg 0x1401e7007
mov dword [rbp - 0x65], 0
mov r8d, dword [rbp - 0x65]
mov edx, dword [rbp - 0x79]
mov r10d, dword [rbp - 0x71]
lea eax, [rdx + 0xb]
test r8d, r8d
cmovne eax, edx
mov edx, eax
mov dword [rbp - 0x79], eax
cmp byte [0x1411dd026], 0
jne 0x1401e735a
mov dword [rbp - 0x79], eax
nop word [rax + rax]
lea eax, [r12 + 3]
cmp eax, r10d
jae 0x1401e735a
mov edx, r12d
add rdx, r13
cmp r14w, word [rdx]
je 0x1401e7357
cmp si, word [rdx]
je 0x1401e7357
cmp di, word [rdx]
je 0x1401e7357
movzx eax, word [rbp - 0x55]
cmp ax, word [rdx]
jne 0x1401e6f34
xor al, al
cmp al, byte [rdx + 2]
je 0x1401e7357
movzx eax, word [rbp - 0x51]
cmp ax, word [rdx]
jne 0x1401e6f48
xor al, al
cmp al, byte [rdx + 2]
je 0x1401e7357
cmp r15b, byte [rdx]
jne 0x1401e6f6d
lea eax, [r12 - 1]
cmp byte [rax + r13], 0
je 0x1401e7357
lea eax, [r12 + 1]
cmp byte [rax + r13], 0
je 0x1401e7357
cmp bx, word [rdx]
jne 0x1401e6f82
lea eax, [r12 - 1]
cmp byte [rax + r13], 0
je 0x1401e7357
mov r8, qword [rbp - 0x11]
xor edx, edx
mov rcx, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp - 0x31]
mov ecx, dword [rax + 0x48]
mov r8d, dword [rax + 0x28]
imul r8d, ecx
xor edx, edx
mov eax, dword [rbp - 0x79]
div r8d
mov r12d, edx
mov r8d, eax
add r8, qword [rbp - 0x21]
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x71]
mov dword [rsp + 0x20], eax
mov r9, r13
movzx edx, byte [rbp - 0x75]
call fcn.1401c1720
test eax, eax
je 0x1401e705f
movzx ecx, byte [r12 + r13]
mov edx, dword [rbp - 0x79]
mov r10d, dword [rbp - 0x71]
test ecx, ecx
je 0x1401e735a
inc ecx
add edx, ecx
mov dword [rbp - 0x79], edx
add r12d, ecx
cmp byte [0x1411dd026], 0
je 0x1401e6ef0
jmp 0x1401e735a
mov r8d, dword [rbp - 0x65]
cmp r8d, 1
jne 0x1401e6ec1
mov ecx, dword [rbp - 0x4d]
and ecx, 7
inc ecx
mov eax, 3
shl eax, cl
mov edx, dword [rbp - 0x79]
add edx, 0xb
add edx, eax
jmp 0x1401e6ec4
movzx eax, word [rbp - 0x55]
cmp ax, word [rcx]
jne 0x1401e7041
xor al, al
cmp al, byte [rcx + 2]
je 0x1401e7059
movzx eax, word [rbp - 0x51]
cmp ax, word [rcx]
jne 0x1401e735a
xor al, al
cmp al, byte [rcx + 2]
jne 0x1401e735a
add edx, 3
mov dword [rbp - 0x79], edx
mov ecx, dword [rbp - 0x79]
mov rdx, qword [rbp - 0x39]
mov qword [rdx + 0x10], rcx
mov rax, qword [rdx + 0x71]
mov dword [rax], 0
mov rax, qword [rdx + 0x71]
mov dword [rax + 4], ecx
lea rdx, [0x1402c8037]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
mov edi, dword [rbp - 0x29]
test edi, edi
je 0x1401e714e
mov ebx, dword [rbp - 0x25]
test ebx, ebx
je 0x1401e714e
cmp edi, 0x2710
jae 0x1401e714e
cmp ebx, 0x2710
jae 0x1401e714e
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e70de
lea rdx, [0x1402f58a8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, edi
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [0x140303db8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, ebx
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e71c6
mov r8d, 0xa
mov rdx, qword [rbp - 0x21]
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x19], 1
mov rdx, rdi
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x39]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, byte [rbp - 0x6d]
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r9d, r9d
movzx r8d, byte [r8 + r13]
add r8d, 3
lea eax, [r12 + r8]
cmp eax, r10d
jae 0x1401e7218
movzx r9d, byte [rax + r13]
lea ecx, [r9 + 1]
test r9d, r9d
cmove ecx, r9d
lea eax, [rcx + r8]
add r12d, eax
lea eax, [rcx + r8]
add edx, eax
mov dword [rbp - 0x79], edx
cmp r12d, r10d
jbe 0x1401e7294
mov r8, qword [rbp - 0x11]
xor edx, edx
mov rcx, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp - 0x31]
mov ecx, dword [rax + 0x48]
mov r8d, dword [rax + 0x28]
imul r8d, ecx
xor edx, edx
mov eax, dword [rbp - 0x79]
div r8d
mov r12d, edx
mov r8d, eax
add r8, qword [rbp - 0x21]
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x71]
mov dword [rsp + 0x20], eax
mov r9, r13
movzx edx, byte [rbp - 0x75]
call fcn.1401c1720
test eax, eax
je 0x1401e705f
mov edx, dword [rbp - 0x79]
mov r10d, dword [rbp - 0x71]
lea ecx, [r12 + 1]
cmp byte [rcx + r13], 0x3b
je 0x1401e735a
mov eax, r12d
cmp byte [rax + r13], 0
je 0x1401e734d
cmp byte [0x1411dd026], 0
jne 0x1401e7339
nop
mov eax, r12d
movzx ecx, byte [rax + r13]
test cl, cl
je 0x1401e7335
lea eax, [rcx + 1]
add edx, eax
mov dword [rbp - 0x79], edx
mov r8, qword [rbp - 0x11]
xor edx, edx
mov rcx, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp - 0x31]
mov ecx, dword [rax + 0x48]
mov r8d, dword [rax + 0x28]
imul r8d, ecx
xor edx, edx
mov eax, dword [rbp - 0x79]
div r8d
mov r12d, edx
mov r8d, eax
add r8, qword [rbp - 0x21]
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x71]
mov dword [rsp + 0x20], eax
mov r9, r13
movzx edx, byte [rbp - 0x75]
call fcn.1401c1720
test eax, eax
je 0x1401e705f
cmp byte [0x1411dd026], 0
mov edx, dword [rbp - 0x79]
je 0x1401e72c0
mov r10d, dword [rbp - 0x71]
lea ecx, [r12 + 1]
cmp ecx, r10d
jae 0x1401e7357
mov edx, dword [rbp - 0x79]
cmp byte [rcx + r13], 0x3b
je 0x1401e735a
mov r12d, ecx
inc edx
mov dword [rbp - 0x79], edx
jmp 0x1401e735a
mov edx, dword [rbp - 0x79]
mov eax, dword [rbp - 0x49]
inc eax
mov dword [rbp - 0x49], eax
cmp byte [0x1411dd026], 0
jne 0x1401e705f
jmp 0x1401e6da0