Function at 0x1401e8c10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x28]
sub rsp, 0x128
mov rax, qword [0x1411d99d8]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x48], r9
mov byte [rsp + 0x40], r8b
mov qword [rsp + 0x58], rdx
mov r13, rcx
xor edi, edi
mov dword [rsp + 0x54], edi
xor r15b, r15b
mov dword [rbp - 0x70], 0x75746552
mov dword [rbp - 0x6c], 0x502d6e72
mov word [rbp - 0x68], 0x7461
mov dword [rsp + 0x60], 0x656d694d
mov dword [rsp + 0x64], 0x7265562d
mov dword [rsp + 0x68], 0x6e6f6973
mov dword [rbp - 0x60], 0x6d783f3c
mov dword [rbp - 0x78], 0x6c702f3c
mov dword [rbp - 0x74], 0x3e747369
mov dword [rsp + 0x70], 0x79656b3c
mov dword [rsp + 0x74], 0x6275733e
mov dword [rsp + 0x78], 0x7463656a
mov dword [rsp + 0x7c], 0x656b2f3c
mov word [rbp - 0x80], 0x3e79
mov dword [rbp - 0x58], 0x74732f3c
mov dword [rbp - 0x54], 0x676e6972
mov r14d, edi
mov dword [rsp + 0x44], edi
mov eax, dword [rcx + 0x28]
imul eax, dword [rcx + 0x48]
lea ecx, [rax + rax]
lea edx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12, rax
test rax, rax
je 0x1401e902b
mov eax, dword [r13 + 0x48]
imul eax, dword [r13 + 0x28]
add eax, eax
mov ebx, eax
mov r8d, eax
xor edx, edx
mov rcx, r12
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], ebx
mov r9, r12
mov r8, qword [rsp + 0x48]
movzx edx, byte [rsp + 0x40]
mov ecx, dword [r13 + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401e9022
cmp byte [0x1411dd026], dil
jne 0x1401e9022
movzx edx, word [rbp - 0x68]
mov r9, qword [rbp - 0x70]
mov ecx, dword [rsp + 0x68]
mov r8, qword [rsp + 0x60]
mov r10b, 0x68
cmp r14d, 0xa
jae 0x1401e9022
mov eax, r14d
cmp r9, qword [rax + r12]
jne 0x1401e8d75
cmp dx, word [rax + r12 + 8]
jne 0x1401e8d75
cmp r10b, byte [rax + r12 + 0xa]
je 0x1401e8d87
cmp r8, qword [rax + r12]
jne 0x1401e8d82
cmp ecx, dword [rax + r12 + 8]
je 0x1401e8d92
inc r14d
jmp 0x1401e8d53
mov word [0x1411dd039], 1
jmp 0x1401e8d9b
mov word [0x1411dd039], 0x100
xor eax, eax
mov qword [rbp - 0x48], rax
mov word [rbp - 0x40], ax
test r14d, r14d
je 0x1401e8dd4
lea r8d, [r14 - 1]
mov rdx, r12
lea rcx, [rbp - 0x48]
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add eax, r14d
mov dword [rsp + 0x44], eax
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [r13 + 0x28]
imul ecx, dword [r13 + 0x48]
xor edx, edx
mov eax, dword [rsp + 0x44]
div ecx
mov ebx, eax
mov rsi, qword [rsp + 0x48]
add rbx, rsi
mov edx, 1
mov ecx, 0x500000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r12, rax
test rax, rax
je 0x1401e905b
xor edx, edx
mov r8d, 0x500000
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r15b, 1
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x500000
mov r9, r12
mov r8, rbx
movzx edx, byte [rsp + 0x40]
mov ecx, dword [r13 + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401e9022
mov ecx, dword [r13 + 0x28]
imul ecx, dword [r13 + 0x48]
xor edx, edx
mov r15d, dword [rsp + 0x44]
mov eax, r15d
div ecx
mov dword [rsp + 0x50], edx
mov eax, dword [rbp - 0x60]
cmp eax, dword [rdx + r12]
jne 0x1401e904f
mov al, 0x6c
cmp al, byte [rdx + r12 + 4]
jne 0x1401e904f
lea esi, [rdx + 6]
cmp byte [0x1411dd026], dil
jne 0x1401e8f91
mov r8d, 0x40
mov rbx, qword [rbp - 0x78]
movzx r13d, word [rbp - 0x80]
mov r14, qword [rbp - 0x58]
xor dl, dl
lea eax, [rsi + 0x80]
cmp eax, 0x500000
jae 0x1401e8f71
cmp rbx, qword [rsi + r12]
je 0x1401e8f66
mov rcx, qword [rsp + 0x70]
cmp rcx, qword [rsi + r12]
jne 0x1401e8f5f
mov rcx, qword [rsp + 0x78]
cmp rcx, qword [rsi + r12 + 8]
jne 0x1401e8f5f
cmp r13w, word [rsi + r12 + 0x10]
jne 0x1401e8f5f
test dl, dl
jne 0x1401e8f5f
mov byte [rsp + 0x40], 1
add esi, 0x1c
lea ecx, [rsi + 0x80]
mov r15b, 0x3e
nop word [rax + rax]
cmp ecx, 0x500000
cmovae edi, r8d
cmp r14, qword [rsi + r12]
jne 0x1401e8f17
cmp r15b, byte [rsi + r12 + 8]
je 0x1401e8f24
cmp edi, 0x40
jae 0x1401e8f24
inc esi
inc ecx
inc edi
jmp 0x1401e8f00
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov r8d, edi
mov edx, esi
sub edx, edi
add rdx, r12
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
add esi, 9
add esi, edi
mov r15d, dword [rsp + 0x44]
movzx edx, byte [rsp + 0x40]
mov r8d, 0x40
inc esi
jmp 0x1401e8ea3
sub r15d, dword [rsp + 0x50]
add r15d, 9
jmp 0x1401e8f78
add r15d, 0x800
add r15d, esi
cmp edi, 4
jb 0x1401e8f91
lea rdx, [rbp - 0x30]
lea rcx, [0x1411e9a90]
call qword [reloc.Qt5Core.dll___4QString__QEAAAEAV0_PEBD_Z]
mov rsi, qword [rsp + 0x48]
mov eax, r15d
mov rcx, qword [rsp + 0x58]
mov qword [rcx + 0x10], rax
mov r15b, 1
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401e9022
mov r8d, 0xa
mov rdx, rsi
lea rcx, [rsp + 0x58]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rsp + 0x54], 1
mov rdx, rdi
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r15b
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.1402b25d0
add rsp, 0x128
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
add r15d, 0x80000
jmp 0x1401e8f96
mov al, 1
jmp 0x1401e902f