Function at 0x140164900
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rbx, rdx
mov rdi, rcx
mov qword [rbp + 0x1f], rdx
xor r14d, r14d
mov dword [rbp - 0x69], r14d
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r14
mov qword [rdx + 0x18], 7
mov word [rdx], r14w
mov esi, 1
mov dword [rbp - 0x69], esi
test r8d, r8d
je 0x140166054
sub r8d, esi
je 0x140164a2d
sub r8d, esi
je 0x1401649cc
cmp r8d, esi
jne 0x1401660ae
mov r8d, esi
lea rdx, [rbp - 0x61]
call fcn.14015e950
mov rdx, rax
mov rcx, rbx
call fcn.140004930
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401660ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401660a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r8d, r8d
lea rdx, [rbp - 0x61]
call fcn.14015e950
mov rdx, rax
mov rcx, rbx
call fcn.140004930
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401660ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401660a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, dword [rcx + 0xdc]
call qword [sym.imp.calcbase64.dll_GetChannelById]
mov r13, rax
mov ecx, dword [rdi + 0x10c]
call qword [sym.imp.calcbase64.dll_GetChannelById]
mov r12, rax
movabs r15, 0x20003e003d0020
test r13, r13
je 0x140165155
test rax, rax
je 0x140165155
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x140164abb
lea r15, [rcx + 3]
mov qword [rbx + 0x10], r15
mov r14, rbx
cmp rdx, 7
jbe 0x140164a8f
mov r14, qword [rbx]
lea rcx, [r14 + rcx*2]
mov r8d, 6
lea rdx, [0x140438ed8]
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [r14 + r15*2], ax
xor r14d, r14d
movabs r15, 0x20003e003d0020
jmp 0x140164ad8
mov qword [rsp + 0x20], 3
lea r9, [0x140438ed8]
mov edx, 3
mov rcx, rbx
call fcn.140003d80
lea rdx, [r13 + 0x80]
cmp qword [r13 + 0x98], 7
jbe 0x140164af0
mov rdx, qword [r13 + 0x80]
mov r8, qword [r13 + 0x90]
mov rcx, rbx
call fcn.140003f40
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rax, 2
jb 0x140164b35
lea rdx, [rcx + 2]
mov qword [rbx + 0x10], rdx
mov rax, rbx
cmp r8, 7
jbe 0x140164b27
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20007d
mov word [rax + rdx*2], r14w
jmp 0x140164b52
mov qword [rsp + 0x20], 2
lea r9, [0x140438ae0]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0xe0]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140164b70
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x140164bc0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140164bbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140164bbb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140164bf3
lea r8, [rcx + 4]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140164be8
mov rax, qword [rbx]
mov qword [rax + rcx*2], r15
mov word [rax + r8*2], r14w
jmp 0x140164c10
mov qword [rsp + 0x20], 4
lea r9, [0x140438d30]
mov edx, 4
mov rcx, rbx
call fcn.140003d80
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140164c45
lea r8, [rcx + 1]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140164c38
mov rax, qword [rbx]
mov word [rax + rcx*2], 0x7b
mov word [rax + r8*2], r14w
jmp 0x140164c62
mov qword [rsp + 0x20], 1
lea r9, [0x14041d524]
mov edx, 1
mov rcx, rbx
call fcn.140003d80
lea rdx, [r12 + 0x80]
cmp qword [r12 + 0x98], 7
jbe 0x140164c7d
mov rdx, qword [r12 + 0x80]
mov r8, qword [r12 + 0x90]
mov rcx, rbx
call fcn.140003f40
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rax, 2
jb 0x140164cc3
lea rdx, [rcx + 2]
mov qword [rbx + 0x10], rdx
mov rax, rbx
cmp r8, 7
jbe 0x140164cb5
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20007d
mov word [rax + rdx*2], r14w
jmp 0x140164ce0
mov qword [rsp + 0x20], 2
lea r9, [0x140438ae0]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0x110]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140164cfe
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x140164d4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140164d49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140164d49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
movsxd rax, dword [0x1404ba62c]
cmp eax, 0x23
ja 0x140165155
movabs rcx, 0x840100000
bt rcx, rax
jae 0x140165155
mov ecx, dword [rdi + 0xf4]
test ecx, ecx
je 0x140164ee3
sub ecx, 1
je 0x140164e18
cmp ecx, 1
jne 0x140164fb2
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_NOT_ACTIVE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
mov esi, 0x8001
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
jmp 0x140164fad
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_RELATIVE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
mov esi, 0x2001
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov r8d, 1
lea rdx, reloc.SinoSPE.dll_Ordinal_32
mov rcx, rbx
call fcn.140003f40
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140164ed1
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
jmp 0x140164fa9
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_ABSOLUTE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
mov esi, 0x1001
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov r8d, 1
lea rdx, reloc.SinoSPE.dll_Ordinal_32
mov rcx, rbx
call fcn.140003f40
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140164f9c
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
mov ecx, dword [rdi + 0x124]
test ecx, ecx
je 0x1401650d0
sub ecx, 1
je 0x140165052
cmp ecx, 1
jne 0x140165155
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_MAINTAIN
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
or esi, 0x40
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
jmp 0x14016514c
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_POSITION
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 0x11
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
jmp 0x14016514c
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_APPROACH
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 0x10
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov ecx, dword [rdi + 0x128]
call qword [sym.imp.calcbase64.dll_GetChannelById]
mov r13, rax
mov ecx, dword [rdi + 0x158]
call qword [sym.imp.calcbase64.dll_GetChannelById]
mov r12, rax
test r13, r13
je 0x140165874
test rax, rax
je 0x140165874
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rcx, r8
sub rcx, rdx
cmp rcx, 5
jb 0x1401651cc
lea r15, [rdx + 5]
mov qword [rbx + 0x10], r15
mov r14, rbx
cmp r8, 7
jbe 0x1401651ad
mov r14, qword [rbx]
lea rcx, [r14 + rdx*2]
mov r8d, 0xa
lea rdx, [0x140438ee0]
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [r14 + r15*2], ax
jmp 0x1401651e9
mov qword [rsp + 0x20], 5
lea r9, [0x140438ee0]
mov edx, 5
mov rcx, rbx
call fcn.140003d80
lea rdx, [r13 + 0x80]
cmp qword [r13 + 0x98], 7
jbe 0x140165201
mov rdx, qword [r13 + 0x80]
mov r8, qword [r13 + 0x90]
mov rcx, rbx
call fcn.140003f40
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rax, 2
jb 0x140165249
lea rdx, [rcx + 2]
mov qword [rbx + 0x10], rdx
mov rax, rbx
cmp r8, 7
jbe 0x140165238
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20007d
xor r14d, r14d
mov word [rax + rdx*2], r14w
jmp 0x140165269
mov qword [rsp + 0x20], 2
lea r9, [0x140438ae0]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
xor r14d, r14d
lea r8, [rdi + 0x12c]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140165287
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401652d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401652d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401652d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140165314
lea r8, [rcx + 4]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x1401652ff
mov rax, qword [rbx]
movabs rdx, 0x20003e003d0020
mov qword [rax + rcx*2], rdx
mov word [rax + r8*2], r14w
jmp 0x140165331
mov qword [rsp + 0x20], 4
lea r9, [0x140438d30]
mov edx, 4
mov rcx, rbx
call fcn.140003d80
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140165366
lea r8, [rcx + 1]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140165359
mov rax, qword [rbx]
mov word [rax + rcx*2], 0x7b
mov word [rax + r8*2], r14w
jmp 0x140165383
mov qword [rsp + 0x20], 1
lea r9, [0x14041d524]
mov edx, 1
mov rcx, rbx
call fcn.140003d80
lea rdx, [r12 + 0x80]
cmp qword [r12 + 0x98], 7
jbe 0x14016539e
mov rdx, qword [r12 + 0x80]
mov r8, qword [r12 + 0x90]
mov rcx, rbx
call fcn.140003f40
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rax, 2
jb 0x1401653e4
lea rdx, [rcx + 2]
mov qword [rbx + 0x10], rdx
mov rax, rbx
cmp r8, 7
jbe 0x1401653d6
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20007d
mov word [rax + rdx*2], r14w
jmp 0x140165401
mov qword [rsp + 0x20], 2
lea r9, [0x140438ae0]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0x15c]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016541f
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x14016546f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016546a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14016546a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
movsxd rax, dword [0x1404ba62c]
cmp eax, 0x23
ja 0x140165874
movabs rcx, 0x840100000
bt rcx, rax
jae 0x140165874
mov ecx, dword [rdi + 0x140]
test ecx, ecx
je 0x140165602
sub ecx, 1
je 0x140165538
cmp ecx, 1
jne 0x1401656d0
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_NOT_ACTIVE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 8
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
jmp 0x1401656cb
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_RELATIVE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 7
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov r8d, 1
lea rdx, reloc.SinoSPE.dll_Ordinal_32
mov rcx, rbx
call fcn.140003f40
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x1401655f0
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
jmp 0x1401656c7
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_ABSOLUTE
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 0xe
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov r8d, 1
lea rdx, reloc.SinoSPE.dll_Ordinal_32
mov rcx, rbx
call fcn.140003f40
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x1401656ba
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
mov ecx, dword [rdi + 0x170]
test ecx, ecx
je 0x1401657ef
sub ecx, 1
je 0x140165771
cmp ecx, 1
jne 0x140165874
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_MAINTAIN
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 0xb
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
jmp 0x14016586b
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_POSITION
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 0xa
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
jmp 0x14016586b
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x31], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_29
lea rdx, str.STRING_MAIN_SEQ_DEST_APPROACH
lea rcx, [rbp - 0x41]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x41]
lea rdx, [rbp - 0x61]
call fcn.1401d7170
bts esi, 9
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x61]
cmp qword [rbp - 0x49], 7
cmova rdx, qword [rbp - 0x61]
mov r8, qword [rbp - 0x51]
mov rcx, rbx
call fcn.140003f40
nop
lea rcx, [rbp - 0x61]
call fcn.140006060
nop
lea rcx, [rbp - 0x41]
call fcn.140006060
mov ecx, dword [rdi + 0x174]
call qword [sym.imp.calcbase64.dll_GetChannelById]
mov r13, rax
test rax, rax
je 0x1401660ae
mov rdx, qword [rbx + 0x10]
mov r9, qword [rbx + 0x18]
mov rcx, r9
sub rcx, rdx
cmp rcx, 5
jb 0x1401658d4
lea r15, [rdx + 5]
mov qword [rbx + 0x10], r15
mov r14, rbx
cmp r9, 7
jbe 0x1401658b4
mov r14, qword [rbx]
lea rcx, [r14 + rdx*2]
mov r8d, 0xa
lea rdx, [0x140438ef0]
call sub.VCRUNTIME140.dll_memmove
xor r12d, r12d
mov word [r14 + r15*2], r12w
jmp 0x1401658f4
mov qword [rsp + 0x20], 5
lea r9, [0x140438ef0]
mov edx, 5
mov rcx, rbx
call fcn.140003d80
xor r12d, r12d
lea rdx, [r13 + 0x80]
cmp qword [r13 + 0x98], 7
jbe 0x14016590c
mov rdx, qword [r13 + 0x80]
mov r8, qword [r13 + 0x90]
mov rcx, rbx
call fcn.140003f40
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rax, 2
jb 0x140165951
lea rdx, [rcx + 2]
mov qword [rbx + 0x10], rdx
mov rax, rbx
cmp r8, 7
jbe 0x140165943
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20007d
mov word [rax + rdx*2], r12w
jmp 0x14016596e
mov qword [rsp + 0x20], 2
lea r9, [0x140438ae0]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0x178]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016598c
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401659dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401659d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401659d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
movsxd rax, dword [0x1404ba62c]
cmp eax, 0x23
ja 0x1401660ae
movabs rcx, 0x840100000
bt rcx, rax
jae 0x1401660ae
mov ecx, dword [rdi + 0x18c]
test ecx, ecx
je 0x140165dcc
sub ecx, 1
je 0x140165b02
cmp ecx, 1
jne 0x1401660ae
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x140165a56
lea r8, [rcx + 2]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140165a48
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20002c
mov word [rax + r8*2], r12w
jmp 0x140165a73
mov qword [rsp + 0x20], 2
lea r9, [0x14041d34c]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x51], xmm1
mov r8d, reloc.SinoSPE.dll_Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_NOT_ACTIVE
lea rcx, [rbp - 0x61]
call fcn.140006340
nop
call fcn.1401d56e0
mov rcx, rax
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x41]
call fcn.1401d7170
or esi, 8
mov dword [rbp - 0x69], esi
lea rdx, [rbp - 0x41]
cmp qword [rbp - 0x29], 7
cmova rdx, qword [rbp - 0x41]
mov r8, qword [rbp - 0x31]
mov rcx, rbx
call fcn.140003f40
nop
mov r8, qword [rbp - 0x29]
cmp r8, 7
jbe 0x140165ae2
mov rdx, qword [rbp - 0x41]
call fcn.140006010
movdqa xmm0, xmmword [0x1404530e0]
movdqu xmmword [rbp - 0x31], xmm0
mov word [rbp - 0x41], r12w
lea rcx, [rbp - 0x61]
call fcn.140006060
jmp 0x1401660ae
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x140165b38
lea r8, [rcx + 2]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140165b2a
mov rax, qword [rbx]
mov dword [rax + rcx*2], 0x20002c
mov word [rax + r8*2], r12w
jmp 0x140165b55
mov qword [rsp + 0x20], 2
lea r9, [0x14041d34c]
mov edx, 2
mov rcx, rbx
call fcn.140003d80
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_RELATIVE
lea rcx, [rbp - 0x61]
call fcn.140006340
nop
call fcn.1401d56e0
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x11], xmm1
xor r8d, r8d
lea rdx, [0x140419d94]
lea rcx, [rbp - 0x21]
call fcn.140006340
nop
or esi, 4
mov dword [rbp - 0x69], esi
mov r14, qword [rbp - 0x49]
mov rsi, qword [rbp - 0x61]
mov r10, qword [rbp - 0x51]
test r10, r10
je 0x140165c50
lea r8, [rbp - 0x61]
cmp r14, 7
cmova r8, rsi
movabs r9, 0xcbf29ce484222325
mov rcx, r12
add r10, r10
je 0x140165c04
movabs rdx, 0x100000001b3
nop dword [rax]
movzx eax, byte [r8 + rcx]
xor r9, rax
imul r9, rdx
inc rcx
cmp rcx, r10
jb 0x140165bf0
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x41]
lea rcx, [r13 + 8]
call fcn.140125c20
mov r8, qword [rax + 8]
test r8, r8
jne 0x140165c22
mov r8, qword [r13 + 0x10]
cmp r8, qword [r13 + 0x10]
je 0x140165c50
add r8, 0x30
lea rax, [rbp - 0x21]
cmp rax, r8
je 0x140165c50
mov rdx, r8
cmp qword [r8 + 0x18], 7
jbe 0x140165c42
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x21]
call fcn.1400050d0
nop
mov dword [rbp - 0x69], 2
lea rdx, [rbp - 0x21]
cmp qword [rbp - 9], 7
cmova rdx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 9]
cmp rdx, 7
jbe 0x140165cb5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140165cb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165cb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
movdqa xmm0, xmmword [0x1404530e0]
movdqu xmmword [rbp - 0x11], xmm0
mov word [rbp - 0x21], r12w
cmp r14, 7
jbe 0x140165d05
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140165cfd
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165cfd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1403ca488
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140165d3a
lea r8, [rcx + 1]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140165d2d
mov rax, qword [rbx]
mov word [rax + rcx*2], reloc.SinoSPE.dll_Ordinal_32
mov word [rax + r8*2], r12w
jmp 0x140165d57
mov qword [rsp + 0x20], 1
lea r9, reloc.SinoSPE.dll_Ordinal_32
mov edx, 1
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140165d75
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401660ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401660a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r8d, 2
lea rdx, [0x14041d34c]
mov rcx, rbx
call fcn.140003f40
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], r12
mov r8d, Ordinal_32
lea rdx, str.STRING_MAIN_SEQ_LIMIT_ABSOLUTE
lea rcx, [rbp - 0x61]
call fcn.140006340
nop
call fcn.1401d56e0
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf], xmm1
xor r8d, r8d
lea rdx, [0x140419d94]
lea rcx, [rbp - 1]
call fcn.140006340
nop
or esi, 0x20
mov dword [rbp - 0x69], esi
mov r14, qword [rbp - 0x49]
mov rsi, qword [rbp - 0x61]
mov r10, qword [rbp - 0x51]
test r10, r10
je 0x140165ee0
lea r8, [rbp - 0x61]
cmp r14, 7
cmova r8, rsi
movabs r9, 0xcbf29ce484222325
mov rcx, r12
add r10, r10
je 0x140165e94
movabs rdx, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor r9, rax
imul r9, rdx
inc rcx
cmp rcx, r10
jb 0x140165e80
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x41]
lea rcx, [r13 + 8]
call fcn.140125c20
mov r8, qword [rax + 8]
test r8, r8
jne 0x140165eb2
mov r8, qword [r13 + 0x10]
cmp r8, qword [r13 + 0x10]
je 0x140165ee0
add r8, 0x30
lea rax, [rbp - 1]
cmp rax, r8
je 0x140165ee0
mov rdx, r8
cmp qword [r8 + 0x18], 7
jbe 0x140165ed2
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 1]
call fcn.1400050d0
nop
mov dword [rbp - 0x69], reloc.SinoSPE.dll_Ordinal_16
lea rdx, [rbp - 1]
cmp qword [rbp + 0x17], 7
cmova rdx, qword [rbp - 1]
mov r8, qword [rbp + 0xf]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp + 0x17]
cmp rdx, 7
jbe 0x140165f45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140165f40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165f40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
movdqa xmm0, xmmword [0x1404530e0]
movdqu xmmword [rbp + 0xf], xmm0
mov word [rbp - 1], r12w
cmp r14, 7
jbe 0x140165f95
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140165f8d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165f8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1403ca488
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140165fca
lea r8, [rcx + 1]
mov qword [rbx + 0x10], r8
mov rax, rbx
cmp rdx, 7
jbe 0x140165fbd
mov rax, qword [rbx]
mov word [rax + rcx*2], reloc.SinoSPE.dll_Ordinal_32
mov word [rax + r8*2], r12w
jmp 0x140165fe7
mov qword [rsp + 0x20], 1
lea r9, reloc.SinoSPE.dll_Ordinal_32
mov edx, 1
mov rcx, rbx
call fcn.140003d80
lea r8, [rdi + 0xf8]
lea rdx, [rbp - 0x61]
call fcn.14015abf0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x140166005
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
mov rcx, rbx
call fcn.140003f40
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401660ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401660a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r8d, r8d
lea rdx, [rbp - 0x61]
call fcn.140159b30
mov rdx, rax
mov rcx, rbx
call fcn.140004930
mov rdx, qword [rbp - 0x49]
cmp rdx, 7
jbe 0x1401660ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401660a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
mov rax, rbx
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret