Function at 0x18000edf0
Capabilities:
Hash data with md5

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x1a0], rbx
xor r12d, r12d
mov r13d, r12d
mov dword [rbp + 0x90], r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], select
mov byte [rsp + 0x20], r12b
lea r8d, [r12 + 0x14]
lea rdx, [0x1800553f0]
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea rcx, [rsp + 0x20]
call fcn.180008cd0
lea ecx, [r12 + 0x40]
call qword [0x18005db80]
mov r14, rax
test rax, rax
je 0x18000ee94
xor eax, eax
mov qword [r14], rax
mov qword [r14 + 8], rax
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x20], rax
mov qword [r14 + 0x28], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x38], rax
mov dword [r14 + 0x18], 0x20
mov ecx, 0x40
call qword [0x18005db80]
mov r15, rax
mov qword [rbp + 0x98], rax
test rax, rax
je 0x18000eed7
xor eax, eax
mov qword [r15], rax
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], rax
mov qword [r15 + 0x20], rax
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x30], rax
mov qword [r15 + 0x38], rax
mov dword [r15 + 0x18], 0x40
mov rdi, qword [0x180063430]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18000f24f
nop word [rax + rax]
lea rsi, [rbx + 0x20]
mov rcx, qword [rsi + 0x20]
add rcx, 0x30
cmp qword [rcx + 0x18], 0x10
jb 0x18000ef06
mov rcx, qword [rcx]
lea rdx, str..txt
call fcn.180031094
test eax, eax
je 0x18000f1f2
mov rax, qword [rsi + 0x20]
movzx r8d, byte [rax + 0x52]
lea r9, [rbp - 0x6b]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x18000ef30
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], select
mov byte [rsp + 0x60], dl
lea rax, [rbp - 0x6b]
cmp r9, rax
je 0x18000ef89
lea r8, [rbp - 0x6b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.1800031a0
or r13d, 3
mov r12d, r13d
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], select
mov byte [rsp + 0x40], 0
or r13d, 4
mov dword [rbp + 0x90], r13d
lea r15, [rsi + 0x10]
mov rdx, qword [r15]
inc rdx
lea rcx, [rsp + 0x40]
call fcn.180017a30
cmp qword [rsi + 0x18], 0x10
jb 0x18000efd0
mov rsi, qword [rsi]
mov r8, qword [r15]
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.180017540
mov r8d, 1
lea rdx, [0x1800550f0]
lea rcx, [rsp + 0x40]
call fcn.180017540
mov rdx, qword [rsp + 0x58]
mov rax, rdx
mov r9, qword [rsp + 0x50]
sub rax, r9
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
cmp r8, rax
jbe 0x18000f03c
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x18000f03c
lea r8, [rsp + 0x40]
cmp rdx, 0x10
cmovae r8, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.180017bf0
jmp 0x18000f055
lea rdx, [rsp + 0x60]
cmp rcx, 0x10
cmovae rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.180017540
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], select
mov byte [rax], 0
movups xmmword [rsp + 0x30], xmm1
movups xmmword [rsp + 0x20], xmm0
mov r13d, r12d
and r13d, 0xfffffffb
or r13d, 8
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000f0c1
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f0bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fd95
call fcn.18001ef68
xor r12d, r12d
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], select
mov byte [rsp + 0x40], r12b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18000f114
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f10f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fd9b
call fcn.18001ef68
lea r15, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae r15, qword [rsp + 0x20]
mov ecx, 0x40
call qword [0x18005db80]
mov rsi, rax
test rax, rax
je 0x18000f1b5
xor eax, eax
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rax
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rax
mov dword [rsi + 0x18], reloc.WSOCK32.dll_recv
mov rcx, r15
call fcn.1800035f0
mov qword [rsi + 0x20], rax
test rax, rax
jne 0x18000f17b
mov rcx, rsi
call sym.DeployerDll.dll_cJSON_Delete
jmp 0x18000f1b5
test r14, r14
je 0x18000f1b5
mov rdx, qword [r14 + 0x10]
test rdx, rdx
jne 0x18000f18f
mov qword [r14 + 0x10], rsi
jmp 0x18000f1b5
mov rcx, qword [rdx]
test rcx, rcx
je 0x18000f1ae
nop word [rax + rax]
mov rdx, rcx
mov rax, qword [rcx]
mov rcx, rax
test rax, rax
jne 0x18000f1a0
mov qword [rdx], rsi
mov qword [rsi + 8], rdx
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18000f1f2
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f1ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fda1
call fcn.18001ef68
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x18000f21e
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x18000f219
cmp rbx, qword [rax + 0x10]
jne 0x18000f219
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x18000f206
mov rbx, rax
jmp 0x18000f23f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x18000f23f
nop word [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x18000f230
cmp rbx, rdi
jne 0x18000eef0
mov r15, qword [rbp + 0x98]
call qword [0x180040158]
test r15, r15
je 0x18000f2a7
test r14, r14
je 0x18000f2a7
lea rcx, [0x180055408]
call fcn.1800035f0
mov rdi, rax
test rax, rax
je 0x18000f2a7
mov ebx, dword [r14 + 0x18]
btr ebx, 9
test dword [r14 + 0x18], 0x200
jne 0x18000f294
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x18000f294
call qword [0x18005db88]
mov qword [r14 + 0x38], rdi
mov dword [r14 + 0x18], ebx
mov rdx, r14
mov rcx, r15
call fcn.180005520
movd xmm0, dword [0x180063530]
cvtdq2pd xmm0, xmm0
call sym.DeployerDll.dll_cJSON_CreateNumber
mov rbx, rax
test r15, r15
je 0x18000f30e
test rax, rax
je 0x18000f30e
lea rcx, str.downtype
call fcn.1800035f0
mov rsi, rax
test rax, rax
je 0x18000f30e
mov edi, dword [rbx + 0x18]
btr edi, 9
test dword [rbx + 0x18], 0x200
jne 0x18000f2f8
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x18000f2f8
call qword [0x18005db88]
mov qword [rbx + 0x38], rsi
mov dword [rbx + 0x18], edi
mov rdx, rbx
mov rcx, r15
call fcn.180005520
test eax, eax
jne 0x18000f316
mov rcx, rbx
call sym.DeployerDll.dll_cJSON_Delete
xor edx, edx
mov rcx, r15
call fcn.180004490
xor ecx, ecx
call fcn.18002cb04
mov rbx, rax
mov byte [rbp + 0x48], 0
mov qword [rbp - 0x10], 0
mov dword [rbp - 0x20], 0x67452301
mov dword [rbp - 0x1c], 0xefcdab89
mov dword [rbp - 0x18], 0x98badcfe
mov dword [rbp - 0x14], 0x10325476
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
lea rdx, str.lianmengxu
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rdx + r8], 0
jne 0x18000f376
lea rcx, [rsp + 0x20]
call fcn.1800031a0
nop
lea r9, [rbp - 0x6b]
movabs r8, 0xcccccccccccccccd
test rbx, rbx
jns 0x18000f3f0
neg rbx
nop dword [rax]
nop word [rax + rax]
dec r9
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov rbx, rdx
test rdx, rdx
jne 0x18000f3b0
dec r9
mov byte [r9], 0x2d
jmp 0x18000f418
dec r9
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov rbx, rdx
test rdx, rdx
jne 0x18000f3f0
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rax, [rbp - 0x6b]
cmp r9, rax
je 0x18000f449
lea r8, [rbp - 0x6b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x40]
call fcn.1800031a0
nop
mov rdx, qword [rsp + 0x58]
mov rax, rdx
mov r9, qword [rsp + 0x50]
sub rax, r9
mov rcx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
cmp r8, rax
jbe 0x18000f48e
mov rax, rcx
sub rax, r8
cmp rax, r9
jb 0x18000f48e
lea r8, [rsp + 0x40]
cmp rdx, 0x10
cmovae r8, qword [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.180017bf0
jmp 0x18000f4a7
lea rdx, [rsp + 0x20]
cmp rcx, 0x10
cmovae rdx, qword [rsp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.180017540
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], 0
movups xmmword [rsp + 0x70], xmm1
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x20]
call fcn.180019330
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18000f524
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f51e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fda7
call fcn.18001ef68
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x18000f561
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f55c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdad
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18000f5b1
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f5ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdb3
call fcn.18001ef68
mov ecx, 0x40
call qword [0x18005db80]
mov rdi, rax
test rax, rax
je 0x18000f5ec
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x18], 0x40
mov r8d, dword [0x18005dd60]
lea r9, [rbp - 0x6b]
test r8d, r8d
jns 0x18000f640
neg r8d
nop
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x18000f600
dec r9
mov byte [r9], 0x2d
jmp 0x18000f66a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x18000f640
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
lea rax, [rbp - 0x6b]
cmp r9, rax
je 0x18000f69a
lea r8, [rbp - 0x6b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea r12, [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
cmp r15, 0x10
cmovae r12, rsi
mov ecx, 0x40
call qword [0x18005db80]
mov rbx, rax
test rax, rax
je 0x18000f711
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], reloc.WSOCK32.dll_recv
mov rcx, r12
call fcn.1800035f0
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x18000f707
mov rcx, rbx
call sym.DeployerDll.dll_cJSON_Delete
xor ebx, ebx
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
test rdi, rdi
je 0x18000f76e
test rbx, rbx
je 0x18000f76e
lea rcx, str.channel
call fcn.1800035f0
mov qword [rbp + 0x90], rax
test rax, rax
je 0x18000f76e
mov r12d, dword [rbx + 0x18]
btr r12d, 9
test dword [rbx + 0x18], 0x200
jne 0x18000f75b
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x18000f75b
call qword [0x18005db88]
mov rax, qword [rbp + 0x90]
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], r12d
mov rdx, rbx
mov rcx, rdi
call fcn.180005520
cmp r15, 0x10
jb 0x18000f7a5
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000f79d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdb9
mov rcx, rsi
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
lea rdx, [0x1800634a0]
mov r8, r13
inc r8
cmp byte [rdx + r8], 0
jne 0x18000f7c2
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea r12, [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
cmp r15, 0x10
cmovae r12, rsi
mov ecx, 0x40
call qword [0x18005db80]
mov rbx, rax
test rax, rax
je 0x18000f84d
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], reloc.WSOCK32.dll_recv
mov rcx, r12
call fcn.1800035f0
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x18000f843
mov rcx, rbx
call sym.DeployerDll.dll_cJSON_Delete
xor ebx, ebx
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
test rdi, rdi
je 0x18000f8aa
test rbx, rbx
je 0x18000f8aa
lea rcx, str.internetMac
call fcn.1800035f0
mov qword [rbp + 0x90], rax
test rax, rax
je 0x18000f8aa
mov r12d, dword [rbx + 0x18]
btr r12d, 9
test dword [rbx + 0x18], 0x200
jne 0x18000f897
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x18000f897
call qword [0x18005db88]
mov rax, qword [rbp + 0x90]
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], r12d
mov rdx, rbx
mov rcx, rdi
call fcn.180005520
cmp r15, 0x10
jb 0x18000f8e1
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000f8d9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdbf
mov rcx, rsi
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
lea rdx, [0x1800634b2]
mov r8, r13
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18000f900
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea r12, [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
cmp r15, 0x10
cmovae r12, rsi
mov ecx, 0x40
call qword [0x18005db80]
mov rbx, rax
test rax, rax
je 0x18000f98b
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], reloc.WSOCK32.dll_recv
mov rcx, r12
call fcn.1800035f0
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x18000f981
mov rcx, rbx
call sym.DeployerDll.dll_cJSON_Delete
xor ebx, ebx
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
test rdi, rdi
je 0x18000f9e8
test rbx, rbx
je 0x18000f9e8
lea rcx, str.intranetMac
call fcn.1800035f0
mov qword [rbp + 0x90], rax
test rax, rax
je 0x18000f9e8
mov r12d, dword [rbx + 0x18]
btr r12d, 9
test dword [rbx + 0x18], 0x200
jne 0x18000f9d5
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x18000f9d5
call qword [0x18005db88]
mov rax, qword [rbp + 0x90]
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], r12d
mov rdx, rbx
mov rcx, rdi
call fcn.180005520
cmp r15, 0x10
jb 0x18000fa1f
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000fa17
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdc5
mov rcx, rsi
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
lea rdx, [0x1800634c4]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000fa40
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea r12, [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
cmp r15, 0x10
cmovae r12, rsi
mov ecx, 0x40
call qword [0x18005db80]
mov rbx, rax
test rax, rax
je 0x18000facb
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x18], reloc.WSOCK32.dll_recv
mov rcx, r12
call fcn.1800035f0
mov qword [rbx + 0x20], rax
test rax, rax
jne 0x18000fac1
mov rcx, rbx
call sym.DeployerDll.dll_cJSON_Delete
xor ebx, ebx
mov rsi, qword [rsp + 0x20]
mov r15, qword [rsp + 0x38]
test rdi, rdi
je 0x18000fb24
test rbx, rbx
je 0x18000fb24
lea rcx, str.intranetIp
call fcn.1800035f0
mov r13, rax
test rax, rax
je 0x18000fb1d
mov r12d, dword [rbx + 0x18]
btr r12d, 9
test dword [rbx + 0x18], 0x200
jne 0x18000fb0a
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x18000fb0a
call qword [0x18005db88]
mov qword [rbx + 0x38], r13
mov dword [rbx + 0x18], r12d
mov rdx, rbx
mov rcx, rdi
call fcn.180005520
mov r13, 0xffffffffffffffff
cmp r15, 0x10
jb 0x18000fb5b
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000fb53
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdcb
mov rcx, rsi
call fcn.18001ef68
xor edx, edx
mov rcx, rdi
call fcn.180004490
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
nop dword [rax + rax]
inc r13
cmp byte [rax + r13], 0
jne 0x18000fb80
mov r8, r13
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1800031a0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x48]
call fcn.1800087a0
nop
lea r8, [rbp - 0x48]
lea rdx, [0x1800553ac]
lea rcx, [rbp - 0x68]
call fcn.180017800
nop
lea rcx, [rbp - 0x68]
call fcn.180010140
xor edi, edi
mov qword [rsp + 0x38], select
lea r8d, [rdi + 0x12]
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], dil
test al, al
lea rdx, [0x180055420]
jne 0x18000fbf8
lea rdx, [0x180055438]
call fcn.1800031a0
lea rcx, [rsp + 0x20]
call fcn.180008cd0
test r14, r14
je 0x18000fc6e
nop dword [rax]
mov rbx, qword [r14]
mov eax, dword [r14 + 0x18]
bt eax, 8
jb 0x18000fc48
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x18000fc2f
call sym.DeployerDll.dll_cJSON_Delete
mov eax, dword [r14 + 0x18]
bt eax, 8
jb 0x18000fc48
mov rcx, qword [r14 + 0x20]
test rcx, rcx
je 0x18000fc48
call qword [0x18005db88]
mov eax, dword [r14 + 0x18]
bt eax, 9
jb 0x18000fc5d
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x18000fc5d
call qword [0x18005db88]
mov rcx, r14
call qword [0x18005db88]
mov r14, rbx
test rbx, rbx
jne 0x18000fc10
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], select
mov byte [rsp + 0x20], 0
mov r8d, reloc.WSOCK32.dll_select
lea rdx, [0x180055450]
lea rcx, [rsp + 0x20]
call fcn.1800031a0
lea rcx, [rsp + 0x20]
call fcn.180008cd0
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000fcde
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fcd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdd1
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000fd2a
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fd25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fdd7
call fcn.18001ef68
movdqa xmm0, xmmword [0x180056020]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18000fd74
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fd6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fd8f
call fcn.18001ef68
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180023418
nop
call fcn.180023418
nop
call fcn.180023418
int3
call fcn.180023418
nop
call fcn.180023418
nop
call fcn.180023418
nop
call fcn.180023418
int3
call fcn.180023418
int3
call fcn.180023418
int3
call fcn.180023418
int3
call fcn.180023418
nop
call fcn.180023418
nop
call fcn.180023418
int3