Function at 0x1401f52b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 7], rax
mov qword [rbp - 0x69], r9
movzx edi, r8b
mov r15, rdx
mov qword [rbp - 0x71], rdx
mov rbx, rcx
mov dword [rbp - 0x61], 0
xor sil, sil
mov dword [rbp - 0x29], 0x4f44213c
mov dword [rbp - 0x25], 0x50595443
mov dword [rbp - 0x21], 0x54482045
mov word [rbp - 0x1d], 0x4c4d
mov byte [rbp - 0x1b], 0x20
mov dword [rbp - 0x19], 0x6f64213c
mov dword [rbp - 0x15], 0x70797463
mov dword [rbp - 0x11], 0x74682065
mov word [rbp - 0xd], 0x6c6d
mov byte [rbp - 0xb], 0x20
mov dword [rbp - 9], 0x6d74683c
mov dword [rbp - 1], 0x4d54483c
mov dword [rbp - 0x4d], 0x74682f3c
mov word [rbp - 0x49], 0x6c6d
mov dword [rbp - 0x45], 0x54482f3c
mov word [rbp - 0x41], 0x4c4d
mov dword [rbp - 0x5d], 0x5449543c
mov word [rbp - 0x59], 0x454c
mov dword [rbp - 0x55], 0x7469743c
mov word [rbp - 0x51], 0x656c
mov dword [rbp - 0x39], 0x49542f3c
mov dword [rbp - 0x35], 0x3e454c54
mov dword [rbp - 0x31], 0x69742f3c
mov dword [rbp - 0x2d], 0x3e656c74
xor r14d, r14d
xor r13d, r13d
lea edx, [r14 + 1]
mov ecx, 0x200000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12, rax
test rax, rax
je 0x1401f5671
xor edx, edx
mov r8d, 0x200000
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x200000
mov r9, r12
mov r8, qword [rbp - 0x69]
movzx edx, dil
mov ecx, dword [rbx + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401f565a
lea r8d, [r14 + 0xf]
mov rdx, r12
lea rcx, [rbp - 0x29]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401f5442
lea r8d, [r14 + 0xf]
mov rdx, r12
lea rcx, [rbp - 0x19]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401f5442
mov eax, dword [rbp - 9]
cmp eax, dword [r12]
jne 0x1401f5428
mov al, 0x6c
cmp al, byte [r12 + 4]
je 0x1401f5442
mov eax, dword [rbp - 1]
cmp eax, dword [r12]
jne 0x1401f565a
mov al, 0x4c
cmp al, byte [r12 + 4]
jne 0x1401f565a
mov sil, 1
mov byte [rbp - 0x79], sil
movzx edx, byte [0x1411dd026]
test dl, dl
jne 0x1401f55db
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x31]
lea rax, [r14 + 7]
cmp rax, 0x200000
jae 0x1401f55d3
mov eax, dword [rbp - 0x5d]
cmp eax, dword [r14 + r12]
jne 0x1401f548e
movzx eax, word [rbp - 0x59]
cmp ax, word [r14 + r12 + 4]
jne 0x1401f548e
mov al, 0x3e
cmp al, byte [r14 + r12 + 6]
je 0x1401f54b8
mov eax, dword [rbp - 0x55]
cmp eax, dword [r14 + r12]
jne 0x1401f5575
movzx eax, word [rbp - 0x51]
cmp ax, word [r14 + r12 + 4]
jne 0x1401f5575
mov al, 0x3e
cmp al, byte [r14 + r12 + 6]
jne 0x1401f5575
xor esi, esi
add r14d, 7
nop
test dl, dl
jne 0x1401f5575
lea rax, [r14 + 8]
cmp rax, 0x200000
jae 0x1401f5575
cmp rdi, qword [r14 + r12]
je 0x1401f54f8
cmp rbx, qword [r14 + r12]
je 0x1401f54f8
cmp esi, 0x40
jae 0x1401f54f8
inc r14d
inc esi
cmp esi, 0x104
jbe 0x1401f54c0
jmp 0x1401f5575
lea eax, [rsi + 1]
mov r15d, eax
mov edx, 1
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r13, rax
test rax, rax
je 0x1401f55bd
mov r8d, r15d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov eax, r14d
sub eax, esi
cmp eax, 0x200000
jae 0x1401f556e
mov r8d, esi
mov edx, eax
add rdx, r12
mov rcx, r13
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [r13]
cmp al, 0x2e
ja 0x1401f555e
movabs rcx, 0x400000002400
bt rcx, rax
jae 0x1401f555e
mov byte [r13], 0x2d
mov rdx, r13
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
movzx edx, byte [0x1411dd026]
mov ecx, dword [rbp - 0x4d]
cmp ecx, dword [r14 + r12]
jne 0x1401f5593
movzx ecx, word [rbp - 0x49]
cmp cx, word [r14 + r12 + 4]
jne 0x1401f5593
mov cl, 0x3e
cmp cl, byte [r14 + r12 + 6]
je 0x1401f55cf
mov ecx, dword [rbp - 0x45]
cmp ecx, dword [r14 + r12]
jne 0x1401f55b1
movzx ecx, word [rbp - 0x41]
cmp cx, word [r14 + r12 + 4]
jne 0x1401f55b1
mov cl, 0x3e
cmp cl, byte [r14 + r12 + 6]
je 0x1401f55cf
inc r14d
test dl, dl
jne 0x1401f55d3
jmp 0x1401f5460
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, byte [rbp - 0x79]
jmp 0x1401f5675
add r14d, 9
movzx esi, byte [rbp - 0x79]
mov r15, qword [rbp - 0x71]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401f5653
mov r8d, 0xa
mov rdx, qword [rbp - 0x69]
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x69]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x61], 1
mov rdx, rdi
lea rcx, [rbp - 0x69]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x69]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x71]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov eax, r14d
mov qword [r15 + 0x10], rax
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r13, r13
je 0x1401f5671
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, sil
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret