Function at 0x1401fea90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], r9
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
mov rbx, r9
movzx r14d, r8b
mov rdi, rcx
xor r8d, r8d
mov dword [rbp - 0x28], r8d
xor r12b, r12b
mov byte [rbp - 0x38], r12b
mov dword [rbp - 0x30], 0x564d4448
mov dword [rbp - 0x2c], 0x52504448
mov word [rbp - 0x34], 0x4047
mov ecx, dword [rcx + 0x48]
xor edx, edx
mov eax, 0x1f40
div ecx
mov qword [rbp - 0x20], r8
mov r13d, r8d
imul ecx, eax
imul ecx, dword [rdi + 0x28]
mov esi, ecx
lea edx, [r8 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r15, rax
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, r15
mov r8, rbx
movzx edx, r14b
mov ecx, dword [rdi + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401fee08
mov ebx, 4
mov r14d, ebx
movzx eax, word [rbp - 0x34]
cmp ax, word [r15 + 4]
jne 0x1401feb81
cmp rsi, 0xdb
jbe 0x1401feb81
mov eax, dword [rbp - 0x30]
cmp eax, dword [r15 + 0xd7]
je 0x1401feb7a
mov eax, dword [rbp - 0x2c]
cmp eax, dword [r15 + 0xd7]
jne 0x1401fee08
mov r12b, 1
mov byte [rbp - 0x38], r12b
cmp byte [0x1411dd026], r13b
jne 0x1401fed71
mov r12d, 0xc0
mov qword [rbp - 0x18], r14
cmp rbx, rsi
jl 0x1401febf0
mov ecx, dword [rdi + 0x48]
imul ecx, dword [rdi + 0x28]
mov rax, r14
cqo
idiv rcx
mov rbx, rdx
mov rdi, qword [rbp + 0x60]
add rdi, rax
mov r8, rsi
xor edx, edx
mov rcx, r15
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, r15
mov r8, rdi
movzx edx, byte [rbp + 0x58]
mov rdi, qword [rbp + 0x48]
mov ecx, dword [rdi + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401fee03
mov al, 0x47
cmp al, byte [r15 + rbx]
jne 0x1401fed64
lea rax, [rbx - 4]
test rax, rax
js 0x1401fec45
cmp rbx, rsi
jge 0x1401fec45
cmp byte [0x1411dd028], 0
jne 0x1401fec3c
movzx eax, byte [r15 + rbx - 1]
mov byte [rbp - 0x2c], al
movzx eax, byte [r15 + rbx - 2]
mov byte [rbp - 0x2b], al
movzx eax, byte [r15 + rbx - 3]
mov byte [rbp - 0x2a], al
movzx eax, byte [r15 + rbx - 4]
mov byte [rbp - 0x29], al
mov eax, dword [rbp - 0x2c]
jmp 0x1401fec41
mov eax, dword [r15 + rbx - 4]
mov qword [rbp - 0x20], rax
add r14, r12
add rbx, r12
lea rax, [rbx + 0xc0]
cmp rax, rsi
jl 0x1401fecf6
mov ecx, dword [rdi + 0x48]
imul ecx, dword [rdi + 0x28]
mov rax, r14
cqo
idiv rcx
mov rbx, rdx
mov rdi, qword [rbp + 0x60]
add rdi, rax
mov r8, rsi
xor edx, edx
mov rcx, r15
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, r15
mov r8, rdi
movzx edx, byte [rbp + 0x58]
mov rdi, qword [rbp + 0x48]
mov ecx, dword [rdi + 0x48]
call fcn.1401c1720
test eax, eax
je 0x1401fee03
lea rax, [rbx - 4]
test rax, rax
js 0x1401fed3e
cmp rbx, rsi
jge 0x1401fed3e
cmp byte [0x1411dd028], 0
jne 0x1401fed36
movzx eax, byte [r15 + rbx - 1]
mov byte [rbp - 0x30], al
movzx eax, byte [r15 + rbx - 2]
mov byte [rbp - 0x2f], al
movzx eax, byte [r15 + rbx - 3]
mov byte [rbp - 0x2e], al
movzx eax, byte [r15 + rbx - 4]
mov byte [rbp - 0x2d], al
mov eax, dword [rbp - 0x30]
jmp 0x1401fed3b
lea rax, [rbx - 4]
test rax, rax
js 0x1401fed3e
cmp rbx, rsi
jge 0x1401fed3e
cmp byte [0x1411dd028], 0
jne 0x1401fed36
movzx eax, byte [r15 + rbx - 1]
mov byte [rbp - 0x34], al
movzx eax, byte [r15 + rbx - 2]
mov byte [rbp - 0x33], al
movzx eax, byte [r15 + rbx - 3]
mov byte [rbp - 0x32], al
movzx eax, byte [r15 + rbx - 4]
mov byte [rbp - 0x31], al
mov eax, dword [rbp - 0x34]
jmp 0x1401fed3b
mov eax, dword [r15 + rbx - 4]
mov r13d, eax
cmp r13, qword [rbp - 0x20]
js 0x1401fed53
cmp byte [0x1411dd026], 0
je 0x1401feb94
jmp 0x1401fed6c
mov r14, qword [rbp - 0x18]
cmp rbx, r12
jge 0x1401fed5f
sub r12, rbx
add r14, r12
jmp 0x1401fed6c
cmp rbx, r12
jge 0x1401fed6c
sub r14, rbx
movzx r12d, byte [rbp - 0x38]
test r12b, r12b
je 0x1401fee08
mov rax, qword [0x1411e9a90]
cmp dword [rax + 4], 0
je 0x1401fedf2
mov r8d, 0xa
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_long_long___int64___int_]
mov rdi, rax
mov r8d, 0xffffffff
lea rdx, [0x1402f58a8]
lea rcx, [rbp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf8_char_const____ptr64__int_]
mov rbx, rax
mov dword [rbp - 0x28], 1
mov rdx, rdi
lea rcx, [rbp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
mov rdx, rbx
lea rcx, [0x1411e9a90]
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::append_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rbp + 0x48]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rax, qword [rbp + 0x50]
mov qword [rax + 0x10], r14
mov rcx, qword [rbp + 0x68]
mov byte [rcx], 1
jmp 0x1401fee08
movzx r12d, byte [rbp - 0x38]
test r15, r15
je 0x1401fee16
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r12b
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret