Function at 0x1401e7380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp - 1], rax
mov qword [rbp - 0x49], r9
movzx esi, r8b
mov qword [rbp - 0x29], rdx
mov rbx, rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
xor ecx, ecx
mov dword [rbp - 0x39], ecx
xor r15b, r15b
mov byte [rbp - 0x7d], r15b
mov dword [rbp - 0x61], 0x4d524f46
mov dword [rbp - 0x75], 0x46464941
mov dword [rbp - 0x71], 0x43464941
mov dword [rbp - 0x6d], 0x20296328
mov dword [rbp - 0x69], 0x48545541
mov dword [rbp - 0x65], 0x4f4e4e41
mov dword [rbp - 0x79], ecx
mov r12d, ecx
mov dword [rsp + 0x40], ecx
mov r14d, dword [rbx + 0x28]
imul r14d, dword [rbx + 0x48]
add r14d, r14d
mov dword [rbp - 0x59], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
mov qword [rbp - 0x51], rcx
mov edi, r14d
lea edx, [rcx + 1]
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r13, rax
test rax, rax
je 0x1401e7a12
mov r8d, edi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r11d, r11d
mov dword [rsp + 0x30], r11d
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], r14d
mov r9, r13
mov r8, qword [rbp - 0x49]
movzx edx, sil
mov ecx, dword [rbx + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401e7a09
mov eax, dword [rbp - 0x61]
cmp eax, dword [r13]
jne 0x1401e7a09
cmp byte [0x1411dd026], r12b
jne 0x1401e7a09
mov r8d, 0xc
mov dword [rbp - 0x61], r8d
mov r15d, dword [rbp - 0x75]
mov ebx, dword [rbp - 0x71]
mov edi, dword [rbp - 0x6d]
mov esi, dword [rbp - 0x69]
mov r14d, dword [rbp - 0x65]
movzx edx, byte [0x1411dd028]
mov r11d, 0x18
mov r9d, dword [rbp - 0x59]
cmp r8d, r9d
jae 0x1401e76ef
lea r12d, [r8 - 4]
add r12, r13
cmp r15d, dword [r12]
jne 0x1401e751f
test dl, dl
jne 0x1401e7509
movzx eax, byte [r13 + 7]
mov byte [rbp - 0x65], al
movzx eax, byte [r13 + 6]
mov byte [rbp - 0x64], al
movzx eax, byte [r13 + 5]
mov byte [rbp - 0x63], al
movzx eax, byte [r13 + 4]
mov byte [rbp - 0x62], al
mov eax, dword [rbp - 0x65]
lea r12d, [rax + 8]
mov dword [rsp + 0x40], r12d
mov byte [rbp - 0x7d], 1
jmp 0x1401e78f1
mov eax, dword [r13 + 4]
lea r12d, [rax + 8]
mov dword [rsp + 0x40], r12d
mov byte [rbp - 0x7d], 1
jmp 0x1401e78f1
cmp ebx, dword [r12]
jne 0x1401e7573
cmp r9d, 8
jbe 0x1401e755c
test dl, dl
jne 0x1401e7554
movzx eax, byte [r13 + 7]
mov byte [rbp - 0x69], al
movzx eax, byte [r13 + 6]
mov byte [rbp - 0x68], al
movzx eax, byte [r13 + 5]
mov byte [rbp - 0x67], al
movzx eax, byte [r13 + 4]
mov byte [rbp - 0x66], al
mov eax, dword [rbp - 0x69]
jmp 0x1401e7558
mov eax, dword [r13 + 4]
mov dword [rsp + 0x40], eax
mov r12d, dword [rsp + 0x40]
add r12d, 8
mov dword [rsp + 0x40], r12d
mov byte [rbp - 0x7d], 1
jmp 0x1401e78f1
cmp edi, dword [r12]
jne 0x1401e77e3
lea eax, [r8 + 4]
cmp eax, r9d
jae 0x1401e75b5
mov ecx, r8d
add rcx, r13
test dl, dl
jne 0x1401e75b0
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x6d], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x6c], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x6b], al
movzx eax, byte [rcx]
mov byte [rbp - 0x6a], al
mov eax, dword [rbp - 0x6d]
jmp 0x1401e75b2
mov eax, dword [rcx]
mov dword [rbp - 0x79], eax
mov r10d, dword [rbp - 0x79]
add r10d, 0xfffffffb
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
cmp r10d, 0x18
cmova r10d, r11d
mov dword [rbp - 0x79], r10d
lea eax, [r10 + 0x18]
cmp eax, r9d
jae 0x1401e76e1
xor r8d, r8d
xor r12d, r12d
lea eax, [r10 + 2]
mov r9d, 0xfffffffe
sub r9d, r10d
lea ecx, [rax - 2]
cmp byte [rcx + r13], 0
je 0x1401e7673
lea ecx, [rax - 1]
cmp byte [rcx + r13], 0
je 0x1401e766d
cmp byte [rax + r13], 0
je 0x1401e7663
lea ecx, [rax + 1]
cmp byte [rcx + r13], 0
je 0x1401e7659
lea ecx, [rax + 2]
cmp byte [rcx + r13], 0
je 0x1401e764f
lea ecx, [rax + 3]
cmp byte [rcx + r13], 0
je 0x1401e7645
add eax, 6
add r12, 6
add r8d, 6
lea ecx, [r9 + rax]
cmp ecx, 0x18
jl 0x1401e75f6
jmp 0x1401e7673
add r12, 5
add r8d, 5
jmp 0x1401e7673
add r12, 4
add r8d, 4
jmp 0x1401e7673
add r12, 3
add r8d, 3
jmp 0x1401e7673
add r12, 2
add r8d, 2
jmp 0x1401e7673
inc r12
inc r8d
cmp r8d, 0x18
jne 0x1401e7682
mov r8d, 0x17
mov r12d, r8d
movsxd r8, r8d
mov edx, r10d
add rdx, r13
lea rcx, [rbp - 0x19]
call sub.VCRUNTIME140.dll_memcpy
cmp r12, 0x18
jae 0x1401e7a36
mov byte [rbp + r12 - 0x19], 0
mov r8d, 0xffffffff
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromLatin1_char_const____ptr64__int_]
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x31]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx edx, byte [0x1411dd028]
mov r10d, dword [rbp - 0x79]
mov r8d, dword [rbp - 0x61]
mov r12d, dword [rsp + 0x40]
test r10d, r10d
jne 0x1401e78f1
movzx r15d, byte [rbp - 0x7d]
test r15b, r15b
je 0x1401e7a09
mov eax, r12d
mov r12, qword [rbp - 0x29]
mov qword [r12 + 0x10], rax
mov rax, qword [rbp - 0x41]
mov byte [rax], 1
mov r14, qword [rbp - 0x51]
test r14, r14
je 0x1401e7a09
mov rdx, r14
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov edx, 0x2d
lea rcx, [rbp - 0x7d]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_int____ptr64]
mov rbx, rax
mov edx, 0x3a
lea rcx, [rsp + 0x40]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_int____ptr64]
mov r9d, 1
movzx r8d, word [rbx]
movzx edx, word [rax]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::replace_class_QChar__class_QChar__enum_Qt::CaseSensitivity____ptr64]
xor edx, edx
xor ecx, ecx
mov rax, r14
inc edx
cmp byte [rax], 0
je 0x1401e7781
inc ecx
inc rax
cmp ecx, 0x20
jb 0x1401e7770
xor edi, edi
mov ebx, edx
lea ecx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor r11d, r11d
mov r8d, r11d
mov r9, rsi
mov rdx, r14
movabs r10, 0x400200100000000
movzx ecx, byte [rdx]
test cl, cl
je 0x1401e790b
cmp cl, 0x3a
ja 0x1401e77ca
bt r10, rcx
jb 0x1401e77d2
mov byte [r9], cl
inc edi
inc r9
inc r8d
inc rdx
cmp r8d, 0x20
jb 0x1401e77b4
jmp 0x1401e7912
cmp esi, dword [r12]
jne 0x1401e7830
lea eax, [r8 + 4]
cmp eax, r9d
jae 0x1401e78ec
mov ecx, r8d
add rcx, r13
test dl, dl
jne 0x1401e7826
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x71], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x70], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x6f], al
movzx eax, byte [rcx]
mov byte [rbp - 0x6e], al
mov eax, dword [rbp - 0x71]
mov dword [rbp - 0x79], eax
jmp 0x1401e78ec
mov eax, dword [rcx]
mov dword [rbp - 0x79], eax
jmp 0x1401e78ec
cmp r14d, dword [r12]
jne 0x1401e78ec
lea eax, [r8 + 4]
cmp eax, r9d
jae 0x1401e7872
mov ecx, r8d
add rcx, r13
test dl, dl
jne 0x1401e786d
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x75], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x74], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x73], al
movzx eax, byte [rcx]
mov byte [rbp - 0x72], al
mov eax, dword [rbp - 0x75]
jmp 0x1401e786f
mov eax, dword [rcx]
mov dword [rbp - 0x79], eax
lea eax, [r8 + 0x24]
cmp eax, r9d
jae 0x1401e78ec
mov edx, 0x80
lea ecx, [rdx - 0x7f]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, rax
mov qword [rbp - 0x51], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rcx + 0x14], xmm0
movups xmmword [rcx + 0x24], xmm0
movups xmmword [rcx + 0x34], xmm0
movups xmmword [rcx + 0x44], xmm0
movups xmmword [rcx + 0x54], xmm0
movups xmmword [rcx + 0x64], xmm0
mov qword [rcx + 0x74], rax
mov dword [rcx + 0x7c], eax
movups xmm0, xmmword [r12 + 0x12]
movups xmmword [rcx], xmm0
mov eax, dword [r12 + 0x22]
mov dword [rcx + 0x10], eax
mov rax, rcx
mov ecx, 0x15
nop dword [rax]
cmp byte [rax], 0x2d
jne 0x1401e78d8
mov byte [rax], 0x3a
inc rax
sub rcx, 1
jne 0x1401e78d0
movzx edx, byte [0x1411dd028]
mov r8d, dword [rbp - 0x61]
mov r12d, dword [rsp + 0x40]
add r8d, 2
mov dword [rbp - 0x61], r8d
cmp byte [0x1411dd026], 0
jne 0x1401e76ef
jmp 0x1401e74b0
movsxd rax, edi
mov byte [rax + rsi], r11b
mov qword [rbp - 0x59], r11
test rsi, rsi
je 0x1401e792d
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r11b
jne 0x1401e7922
jmp 0x1401e7932
mov eax, 0xffffffff
mov edx, eax
mov rcx, rsi
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp - 0x51], rax
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x29]
call fcn.1400fa750
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movabs rcx, 0x19254d3800
mov rax, qword [rbp - 0x59]
add rax, rcx
mov qword [rbp - 0x59], rax
mov dword [r12 + 0x41], eax
shr rax, 0x20
mov dword [r12 + 0x45], eax
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e7a09
mov r8d, 0xa
mov rdx, qword [rbp - 0x49]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x39], 1
mov rdx, rdi
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x49]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r15b
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1402b28dc
int3