Function at 0x1401e8710
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xd8
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 7], rax
mov r12, r9
mov qword [rbp - 0x29], r9
movzx r13d, r8b
mov byte [rbp - 0x6d], r8b
mov qword [rbp - 0x41], rdx
mov r14, rcx
mov qword [rbp - 0x19], rcx
xor eax, eax
mov dword [rbp - 0x21], eax
xor sil, sil
mov byte [rsp + 0x40], sil
mov dword [rbp - 0x71], 0x46464952
mov dword [rbp - 0x7d], 0x20495641
mov dword [rbp - 0x59], 0x5453494c
mov dword [rbp - 0x65], 0x4b4e554a
mov dword [rbp - 0x61], 0x31786469
mov dword [rbp - 0x5d], 0x50534944
mov dword [rbp - 0x39], 0x584d505f
mov dword [rbp - 0x69], 0x43534c55
mov dword [rbp - 0x79], 0x416d7250
mov dword [rbp - 0x75], 0x514e554a
mov dword [rbp - 9], 0x45746f50
mov dword [rbp - 5], 0x646f636e
mov word [rbp - 1], 0x7265
mov dword [rbp - 0x49], eax
mov dword [rbp - 0x45], eax
mov edi, dword [rcx + 0x28]
imul edi, dword [rcx + 0x48]
add edi, edi
mov dword [rbp - 0x31], edi
mov r15d, edi
mov qword [rbp - 0x11], r15
lea edx, [rax + 1]
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbx, rax
mov qword [rbp - 0x51], rax
test rax, rax
je 0x1401e8b9d
mov r8d, r15d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9, rbx
mov r8, r12
movzx edx, r13b
mov ecx, dword [r14 + 0x48]
call fcn.1401c1720
mov r9, rbx
test eax, eax
je 0x1401e8b94
mov eax, dword [rbp - 0x71]
cmp eax, dword [rbx]
jne 0x1401e8b94
mov eax, dword [rbp - 0x7d]
cmp eax, dword [rbx + 8]
jne 0x1401e8b94
mov r8d, 0xc
mov dword [rbp - 0x71], r8d
movzx ecx, byte [0x1411dd028]
cmp edi, 0x44
jbe 0x1401e887e
test cl, cl
je 0x1401e8878
movzx eax, byte [rbx + 0x43]
mov byte [rbp - 0x7d], al
movzx eax, byte [rbx + 0x42]
mov byte [rbp - 0x7c], al
movzx eax, byte [rbx + 0x41]
mov byte [rbp - 0x7b], al
movzx eax, byte [rbx + 0x40]
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x7d]
jmp 0x1401e887b
mov eax, dword [rbx + 0x40]
mov dword [rbp - 0x45], eax
cmp edi, 0x48
jbe 0x1401e88ae
test cl, cl
je 0x1401e88a8
movzx eax, byte [rbx + 0x47]
mov byte [rbp - 0x7d], al
movzx eax, byte [rbx + 0x46]
mov byte [rbp - 0x7c], al
movzx eax, byte [rbx + 0x45]
mov byte [rbp - 0x7b], al
movzx eax, byte [rbx + 0x44]
mov byte [rbp - 0x7a], al
mov eax, dword [rbp - 0x7d]
jmp 0x1401e88ab
mov eax, dword [rbx + 0x44]
mov dword [rbp - 0x49], eax
cmp byte [0x1411dd026], sil
jne 0x1401e8b94
mov ebx, dword [rbp - 0x65]
mov edi, dword [rbp - 0x61]
mov esi, dword [rbp - 0x5d]
mov r14d, dword [rbp - 0x39]
mov r15d, dword [rbp - 0x69]
mov r12d, dword [rbp - 0x79]
mov r13d, dword [rbp - 0x75]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rbp - 0x19]
mov ecx, dword [rax + 0x48]
imul ecx, dword [rax + 0x28]
xor edx, edx
mov eax, r8d
div ecx
mov dword [rbp - 0x69], edx
add rax, qword [rbp - 0x29]
mov qword [rbp - 0x39], rax
mov r8, qword [rbp - 0x11]
xor edx, edx
mov rcx, r9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov eax, dword [rbp - 0x31]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp - 0x51]
mov r8, qword [rbp - 0x39]
movzx edx, byte [rbp - 0x6d]
mov rax, qword [rbp - 0x19]
mov ecx, dword [rax + 0x48]
call fcn.1401c1720
mov r9, qword [rbp - 0x51]
test eax, eax
je 0x1401e8b8f
mov r8d, dword [rbp - 0x69]
lea edx, [r8 + 4]
mov ecx, dword [rbp - 0x31]
cmp edx, ecx
jae 0x1401e8a35
lea eax, [rdx + 4]
cmp eax, ecx
jae 0x1401e8a35
mov eax, dword [rbp - 0x59]
cmp eax, dword [r8 + r9]
je 0x1401e89c4
cmp ebx, dword [r8 + r9]
je 0x1401e89c4
cmp edi, dword [r8 + r9]
je 0x1401e8996
cmp esi, dword [r8 + r9]
je 0x1401e8996
cmp r14d, dword [r8 + r9]
je 0x1401e8996
cmp r15d, dword [r8 + r9]
je 0x1401e8996
cmp r12d, dword [r8 + r9]
je 0x1401e8996
cmp r13d, dword [r8 + r9]
jne 0x1401e8a35
mov ecx, edx
add rcx, r9
cmp byte [0x1411dd028], 0
je 0x1401e8a0d
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x75], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x74], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x73], al
movzx eax, byte [rcx]
mov byte [rbp - 0x72], al
mov eax, dword [rbp - 0x75]
jmp 0x1401e8a0f
mov rax, qword [rbp - 9]
cmp rax, qword [r8 + r9 + 0x14]
jne 0x1401e89df
movzx eax, word [rbp - 1]
cmp ax, word [r8 + r9 + 0x1c]
je 0x1401e8b8f
mov ecx, edx
add rcx, r9
cmp byte [0x1411dd028], 0
je 0x1401e8a0d
movzx eax, byte [rcx + 3]
mov byte [rbp - 0x79], al
movzx eax, byte [rcx + 2]
mov byte [rbp - 0x78], al
movzx eax, byte [rcx + 1]
mov byte [rbp - 0x77], al
movzx eax, byte [rcx]
mov byte [rbp - 0x76], al
mov eax, dword [rbp - 0x79]
jmp 0x1401e8a0f
mov eax, dword [rcx]
mov r8d, dword [rbp - 0x71]
add r8d, 8
add r8d, eax
mov dword [rbp - 0x71], r8d
mov byte [rsp + 0x40], 1
cmp byte [0x1411dd026], 0
je 0x1401e88e0
mov sil, 1
jmp 0x1401e8a47
movzx esi, byte [rsp + 0x40]
test sil, sil
je 0x1401e8b94
mov r8d, dword [rbp - 0x71]
mov eax, r8d
mov rcx, qword [rbp - 0x41]
mov qword [rcx + 0x10], rax
mov edi, dword [rbp - 0x49]
test edi, edi
je 0x1401e8b11
mov ebx, dword [rbp - 0x45]
test ebx, ebx
je 0x1401e8b11
cmp edi, 0x2710
jae 0x1401e8b11
cmp ebx, 0x2710
jae 0x1401e8b11
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e8aa1
lea rdx, [0x1402f58a8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, edi
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
lea rdx, [0x140303db8]
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_char_const____ptr64____ptr64]
mov r8d, 0xa
mov edx, ebx
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
nop
mov rdx, rax
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e8b89
mov r8d, 0xa
mov rdx, qword [rbp - 0x29]
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x21], 1
mov rdx, rdi
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp - 0x29]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x41]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov r9, qword [rbp - 0x51]
jmp 0x1401e8b94
movzx esi, byte [rsp + 0x40]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, sil
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret