Function at 0x140004eec
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a8
lea rbp, [rsp + 0x30]
mov rax, qword [0x1402c2ed0]
xor rax, rbp
mov qword [rbp + 0x160], rax
mov r15, rcx
mov qword [rbp + 0x20], rcx
movzx ecx, word [r8]
mov rsi, r8
movsxd r13, r9d
mov r14, rdx
call qword [sym.imp.WS2_32.dll_ntohs]
cmp dword [r14 + 0x9f4], 0
movzx edi, ax
mov word [rbp + 8], ax
je 0x140004f60
movzx ebx, ax
lea rcx, str.ProcessCommand__u_..._n
mov edx, ebx
call fcn.1400010e4
mov edx, ebx
lea rcx, str.ProcessCommand__u_...
call fcn.14009fe54
cmp dword [r14 + 0xb38], 3
je 0x1400054a9
mov rcx, qword [r15 + 0x3e0]
mov rcx, qword [rcx + 0x2a8]
call fcn.14018e5e0
movzx edx, di
mov r12, rax
sub edx, 1
je 0x14000521e
sub edx, 1
je 0x140004fe6
cmp edx, 2
jne 0x14000507e
cmp dword [r14 + 0x9f4], 0
je 0x140004fc0
lea rcx, str.Authentication_Complete..._n
call fcn.1400010e4
lea rcx, str.Authentication_Complete...
call fcn.14009fe54
or dword [r14 + 0xb38], 2
cmp dword [r14 + 0xb38], 3
jne 0x14000507e
mov rdx, r14
mov rcx, r15
call fcn.140004668
jmp 0x14000507e
cmp r13d, 8
jle 0x14000507e
cmp dword [r14 + 0x9f4], 0
je 0x140005006
lea rcx, str.Processing_Authentication_Verification...
call fcn.14009fe54
mov eax, dword [rsp]
sub rsp, 0x20
lea r15, [rsp + 0x30]
mov eax, dword [r15]
lea rax, [rsi + 4]
mov qword [r15], rax
movzx ecx, word [rsi + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ecx, ax
lea rax, [rsi + 4]
add rax, rcx
mov word [r15 + 8], cx
mov qword [r15 + 0xa], rax
movzx eax, r13w
sub ax, cx
sub ax, 4
mov word [r15 + 0x12], ax
lea eax, [rcx + 4]
cmp r13d, eax
jle 0x14000507e
and qword [rbp + 0x10], 0
mov r8d, ecx
mov ebx, 0x30
lea rcx, [rbp + 0x10]
mov rdx, r15
mov dword [rbp + 8], ebx
call fcn.1400bfb40
test rax, rax
jne 0x140005094
lea rcx, str.Invalid_server_certificate_r_n
call fcn.1400010e4
test r12, r12
je 0x1400063a5
mov rcx, r12
call fcn.1400bfa70
jmp 0x1400063a5
call fcn.1400c1350
mov rcx, qword [rbp + 0x10]
lea rsi, [0x1402caa40]
mov r8, rsi
lea r9, [rbp + 8]
mov rdx, rax
call fcn.1400c2520
lea rdi, [r14 + 0xa3c]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.1401c8de0
test eax, eax
je 0x140005105
call fcn.1400c1340
mov rcx, qword [rbp + 0x10]
lea r9, [rbp + 8]
mov rdx, rax
mov r8, rsi
call fcn.1400c2520
mov r8d, 0x20
mov rdx, rdi
mov rcx, rsi
call fcn.1401c8de0
test eax, eax
je 0x140005105
lea rcx, str.Server_certificate_mismatch_r_n
jmp 0x140005079
lea rcx, [rbp + 0x30]
call fcn.1400bcfe0
lea rdi, [0x1402cba40]
mov rdx, rdi
mov rcx, r12
call fcn.140095a9c
mov r8, rbx
lea rcx, [rbp + 0x30]
mov rdx, rdi
call fcn.1400bd070
lea rdx, [r14 + 0xb08]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400bd070
lea rdx, [r14 + 0xad8]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400bd070
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.1400bcfc0
mov rcx, qword [rbp + 0x10]
call fcn.1400c3350
mov rcx, rax
mov r13, rax
call fcn.1400c0170
movzx ecx, word [r15 + 0x12]
mov r8d, ebx
mov r9, qword [r15 + 0xa]
mov rdx, rsi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov ecx, 0x2a1
mov qword [rbp + 0x18], rax
call fcn.1400c0a70
mov r15d, 1
cmp eax, r15d
jne 0x1400051dd
and qword [rsp + 0x28], 0
lea r8d, [r15 + 0x10]
mov rcx, qword [r14 + 0x48]
lea rdx, str.ServerTlsCertHash
or dword [r14 + 0xb38], r15d
mov r9, rdi
mov qword [rsp + 0x20], rbx
call fcn.1400a2b5c
mov rdx, qword [rbp + 0x20]
mov rcx, r14
call fcn.1400047a4
jmp 0x1400051ff
lea rcx, str.Invalid_server_signature_r_n
call fcn.1400010e4
cmp dword [r14 + 0x9f4], 0
je 0x1400051ff
lea rcx, str.Invalid_Server_Signature
call fcn.14009fe54
mov rcx, qword [rbp + 0x18]
call fcn.1400c2780
mov rcx, r13
call fcn.1400bff30
mov rcx, qword [rbp + 0x10]
call fcn.1400bfa70
jmp 0x14000507e
cmp r13d, 0x62
jne 0x14000507e
cmp dword [r14 + 0x9f4], 0
je 0x14000523e
lea rcx, str.Processing_Authentication_Request...
call fcn.14009fe54
lea rdi, [0x1402cba40]
mov rcx, r12
mov rdx, rdi
call fcn.140095a9c
lea r13, [rsi + 2]
mov ebx, 0x30
mov r8d, ebx
mov rdx, r13
mov rcx, rdi
call fcn.1401c8de0
test eax, eax
je 0x1400052c7
mov dword [rbp + 0x10], ebx
test r12, r12
je 0x14000528a
call fcn.1400c1350
mov rdx, rax
lea r9, [rbp + 0x10]
mov r8, rdi
mov rcx, r12
call fcn.1400c2520
mov r8, rbx
mov rdx, r13
mov rcx, rdi
call fcn.1401c8de0
test eax, eax
je 0x1400052c7
lea rcx, str.Bad_server_certificate_hash_r_n
call fcn.1400010e4
cmp dword [r14 + 0x9f4], 0
je 0x14000507e
lea rcx, str.Bad_server_certificate_hash
call fcn.14009fe54
jmp 0x14000507e
lea rcx, [r14 + 0xad8]
mov r9, rbx
lea r8, [rsi + 0x32]
mov rdx, rbx
call section..text
mov ecx, 2
call qword [sym.imp.WS2_32.dll_htons]
lea rcx, [0x1402cba44]
mov word [0x1402cba40], ax
mov qword [rbp + 0x18], rcx
lea rdx, [rbp + 0x18]
mov rcx, qword [r14 + 0xa78]
call fcn.1400bfc20
movzx ecx, ax
mov dword [rbp + 0x10], eax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402cba42], ax
cmp qword [r14 + 0xa80], 0
je 0x1400053f3
lea rcx, [rbp + 0x30]
call fcn.1400bcfe0
mov r8, rbx
lea rcx, [rbp + 0x30]
mov rdx, r13
call fcn.1400bd070
mov r8, rbx
lea rdx, [r14 + 0xad8]
lea rcx, [rbp + 0x30]
call fcn.1400bd070
lea rdx, [r14 + 0xb08]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400bd070
lea rsi, [0x1402caa40]
mov rcx, rsi
lea rdx, [rbp + 0x30]
call fcn.1400bcfc0
mov rcx, qword [r14 + 0xa80]
call fcn.1400c0170
movsx r13, word [rbp + 0x10]
mov edx, 0xfffc
sub edx, r13d
mov qword [rsp + 0x28], rax
mov r14, rax
mov dword [rbp + 8], edx
lea rax, [rbp + 8]
mov r8d, ebx
lea r9, [r13 + 4]
mov qword [rsp + 0x20], rax
add r9, rdi
mov rdx, rsi
mov ecx, 0x2a1
call fcn.1400c0920
mov r15d, 1
cmp eax, r15d
jne 0x1400053e6
mov r9d, dword [rbp + 8]
lea edx, [r15 + 1]
mov rcx, qword [rbp + 0x20]
add r9d, 4
add r9d, r13d
mov r8, rdi
call fcn.1400a4e64
mov rcx, r14
call fcn.1400c2780
jmp 0x14000507e
mov r9, rbx
lea rcx, [0x1402caa40]
mov r8, r13
mov edx, 0x1000
call section..text
mov r9, rbx
lea r8, [r14 + 0xad8]
mov edx, 0xfd0
lea rcx, [0x1402caa70]
call section..text
lea r8, [r14 + 0xb08]
mov r9, rbx
mov edx, 0xfa0
lea rcx, [0x1402caaa0]
call section..text
mov rcx, qword [r14 + 0xa70]
lea r9, [rbp]
and qword [rbp], 0
call fcn.140011bcc
mov dword [rbp + 8], eax
test eax, eax
jle 0x14000507e
movsx rbx, word [rbp + 0x10]
lea rcx, [rdi + 4]
mov r8, qword [rbp]
mov edx, 0xfffc
sub rdx, rbx
movsxd r9, eax
add rcx, rbx
call section..text
mov r9d, dword [rbp + 8]
mov r8, rdi
add r9d, 4
mov edx, 2
add r9d, ebx
mov rcx, r15
call fcn.1400a4e64
mov rcx, qword [rbp]
call fcn.1401cfea0
jmp 0x14000507e
mov eax, 0xa
cmp di, ax
jb 0x1400063a5
cmp byte [rsi], 0x7b
je 0x140006045
mov eax, 0x3e8
cmp di, ax
jae 0x140006045
mov r12d, 4
cmp r13d, r12d
jl 0x1400063a5
movzx ecx, word [rsi + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
cmp dword [r14 + 0x9f4], 0
movzx ebx, ax
mov word [rbp + 0x10], ax
je 0x140005528
movzx ebx, ax
lea rcx, str.BinaryCommand__u___u_..._n
movzx edi, di
mov r8d, ebx
mov edx, edi
call fcn.1400010e4
mov r8d, ebx
lea rcx, str.BinaryCommand__u___u_...
mov edx, edi
call fcn.14009fe54
movzx edi, word [rbp + 8]
movzx ebx, word [rbp + 0x10]
movzx ecx, di
sub ecx, 0xa
je 0x140005566
sub ecx, 1
je 0x140005e16
sub ecx, 1
je 0x140005d66
sub ecx, 1
je 0x140005962
sub ecx, 1
je 0x140005825
sub ecx, 2
je 0x14000564b
cmp ecx, r12d
jne 0x1400063a5
cmp dword [r14 + 0x8c], 0
lea rax, [rsi + 0x34]
mov qword [rbp + 0x18], rax
lea rax, [r13 - 0x34]
mov qword [rbp + 8], rax
jne 0x1400063a5
cmp r13, 0x34
jbe 0x140005ffe
mov r13d, 0x400
lea r15, str.CoreModule
mov edx, r13d
mov rcx, r15
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.1400a349c
mov qword [rbp], rax
mov ebx, 0x30
test rax, rax
je 0x1400055d7
lea rdx, [rsi + 4]
mov r8d, ebx
mov rcx, rax
call fcn.1401c8de0
test eax, eax
je 0x140005fb8
and qword [r14 + 0x9f8], 0
cmp di, 0x14
jne 0x140005ebd
mov rdx, qword [rbp + 8]
lea r9, [rbp]
and qword [rbp], 0
lea rcx, [rsi + 0x34]
xor r8d, r8d
call fcn.140051248
test eax, eax
jne 0x1400063a5
mov rdx, qword [rbp]
mov rcx, qword [r14]
call fcn.140097294
mov rdx, qword [rbp + 8]
lea r9, [rbp]
mov r8, rax
mov qword [rbp + 0x28], rax
lea rcx, [rsi + 0x34]
call fcn.140051248
test eax, eax
jne 0x140005eb2
mov rcx, qword [rbp + 0x28]
mov rax, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp + 8], rax
jmp 0x140005eb4
lea rcx, str.Server_verified_meshcore...
call fcn.1400010e4
cmp qword [r14 + 0x9f8], 0
je 0x140005814
mov rcx, qword [r14 + 0x10]
call fcn.14001d8d0
mov rcx, qword [r14 + 0x10]
lea r8, str.clearTimeout
or edi, 0xffffffff
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi - 1]
mov r8d, edi
call fcn.14001bab0
mov rdx, qword [r14 + 0x9f8]
mov rcx, qword [r14 + 0x10]
call fcn.14001e2e0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi + 2]
call fcn.140019788
mov rcx, qword [r14 + 0x10]
call fcn.14001e554
and qword [r14 + 0x9f8], 0
lea r15, str.CoreModule
mov r13d, 0x400
mov rcx, r15
mov edx, r13d
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
xor r9d, r9d
and qword [rsp + 0x20], 0
mov r8, rax
mov rdx, r15
call fcn.1400a304c
movsxd rdi, eax
mov dword [rbp + 8], edi
cmp edi, r12d
jg 0x140005706
lea rcx, str._meshcore_not_found..._n
jmp 0x14000581b
lea rcx, str._Launching_meshcore..._n
call fcn.1400010e4
mov r9d, dword [r14 + 0xa00]
test r9d, r9d
je 0x140005795
lea r8, str.attachDebugger__webport:__d__wait:_1__.then_function__prt___console.log_Point_Browser_for_Debug_to_port:___prt______n
mov edx, 0xff
lea rcx, [rbp + 0x30]
call fcn.140001138
movsxd rbx, eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea esi, [rbx + rdi]
movsxd rdi, esi
mov rcx, rdi
call fcn.140097330
mov rdx, r13
mov rcx, r15
mov r12, rax
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
lea r9, [r12 - 4]
add r9, rbx
mov qword [rsp + 0x20], rdi
mov r8, rax
mov rdx, r15
call fcn.1400a304c
mov ecx, dword [rbp + 8]
lea r8, [rbp + 0x30]
add ecx, 0xfffffffc
mov r9, rbx
movsxd rdx, ecx
lea rcx, [r12 + 4]
call section..text
lea edi, [rsi - 4]
jmp 0x1400057ca
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140097330
mov rdx, r13
mov rcx, r15
mov r12, rax
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r9, r12
mov r8, rax
mov qword [rsp + 0x20], rdi
mov rdx, r15
call fcn.1400a304c
mov rcx, qword [r14 + 0x10]
lea r8d, [rdi - 4]
lea rdx, [r12 + 4]
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
call fcn.14008a8c8
test eax, eax
jne 0x1400057fe
mov rcx, qword [r14 + 0x10]
xor edx, edx
call fcn.1400196e4
test eax, eax
je 0x140005807
mov rcx, qword [r14 + 0x10]
call fcn.14001e554
mov rcx, r12
call fcn.1401cfea0
jmp 0x1400063a5
lea rcx, str._meshcore_already_running..._n
call fcn.1400010e4
jmp 0x1400063a5
cmp dword [r14 + 0x9e4], 0
jne 0x1400063a5
mov rcx, qword [r14 + 0x38]
lea rdx, str..update.exe
xor ebx, ebx
mov dword [rbp + 8], ebx
call fcn.140003704
mov qword [rbp + 0x18], rax
lea r15d, [rbx + 1]
or edi, 0xffffffff
and qword [rbp], 0
lea rcx, [0x1402c7a40]
mov dword [rsp + 0x28], 0x1000
mov r9d, edi
mov qword [rsp + 0x20], rcx
mov r8, rax
mov ecx, 0xfde9
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r8, [0x14029f428]
lea rdx, [0x1402c7a40]
lea rcx, [rbp]
call fcn.1401ce710
mov r9, qword [rbp]
test r9, r9
je 0x1400058c6
lea eax, [r13 - 4]
mov r8, r15
movsxd rdx, eax
lea rcx, [rsi + 4]
call fcn.1401cfd44
mov rcx, qword [rbp]
mov rbx, rax
call fcn.1401cecc0
test rbx, rbx
jne 0x1400058e5
mov ebx, dword [rbp + 8]
add ebx, r15d
mov dword [rbp + 8], ebx
cmp ebx, r12d
jge 0x14000592b
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x18]
jmp 0x140005853
cmp dword [rbp + 8], r12d
jge 0x14000592b
mov ecx, reloc.WS2_32.dll_ntohl
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402cba40], ax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402cba42], ax
mov r9d, r12d
lea r8, [0x1402cba40]
mov rcx, qword [rbp + 0x20]
mov edx, 2
call fcn.1400a4e64
jmp 0x1400063a5
mov rcx, qword [r14 + 0x10]
call fcn.14009727c
test eax, eax
je 0x1400063a5
mov rcx, qword [r14 + 0x10]
cmp qword [rcx - 0x10], 8
jne 0x1400063a5
mov r9d, 0xf08
lea rdx, str.require_MeshAgent_.SendCommand__action:_sessions__type_:_msg__value_:__1:__msg:_Self_Update_FAILED._Write_Error_while_writing_update_block__icon:_3_____
call fcn.14001a28c
jmp 0x1400063a5
xor edi, edi
cmp dword [r14 + 0x9e4], edi
jne 0x1400063a5
mov rcx, qword [r14 + 0x38]
lea rdx, str..update.exe
call fcn.140003704
mov qword [rbp + 0x18], rax
mov r15, rax
cmp r13d, r12d
jne 0x1400059ac
cmp dword [r14 + 0x9ec], edi
je 0x140005d59
mov r8d, 0xcaa
lea rcx, str.SelfUpdate____Starting_download...
jmp 0x140005d46
cmp r13d, 0x34
jne 0x1400063a5
lea rdx, [rbp + 0x130]
mov rcx, r15
call fcn.140004264
test eax, eax
jne 0x140005d30
lea rdx, [rsi + 4]
lea r8d, [r13 - 4]
lea rcx, [rbp + 0x130]
call fcn.1401c8de0
test eax, eax
jne 0x140005d30
mov rax, qword [r14 + 0x10]
mov r12, qword [rax + 0x70]
sub r12, qword [rax + 0x68]
sar r12, 4
cmp dword [r14 + 0x9ec], edi
je 0x140005a22
xor r9d, r9d
mov dword [rsp + 0x20], edi
mov r8d, 0xcb4
lea rdx, str...meshcore_agentcore.c
lea rcx, str.SelfUpdate____Download_Complete..._Hash_verified
call fcn.14009fd00
lea rsi, [0x1402caa40]
cmp dword [r14 + 0x9f0], edi
je 0x140005ac8
mov r9, qword [r14 + 0x38]
lea r8, str._s.zip
mov edx, 0x1000
mov rcx, rsi
call fcn.140001138
mov rdx, rsi
lea rcx, [rbp]
call fcn.14009f2ec
mov ebx, eax
test eax, eax
jne 0x140005a87
mov rdx, qword [r14 + 0x38]
lea rcx, [rbp]
call fcn.14009f2ec
mov ebx, eax
cmp dword [r14 + 0x9ec], edi
je 0x140005ab0
mov r8d, 0xcbe
lea rcx, str.SelfUpdate____Overriding_update_with_same_version...
jmp 0x140005a9d
cmp dword [r14 + 0x9ec], edi
je 0x140005ab0
mov r8d, 0xcc2
lea rcx, str.SelfUpdate____Overriding_update_with_provided_zip...
xor r9d, r9d
mov dword [rsp + 0x20], edi
lea rdx, str...meshcore_agentcore.c
call fcn.14009fd00
mov rdx, qword [rbp]
mov r8d, ebx
mov rcx, r15
call fcn.14009f430
cmp dword [r14 + 0x9f0], edi
jne 0x140005ad1
cmp dword [r14 + 0x9e8], edi
je 0x140005b43
mov edx, 0x4000
lea rcx, [0x140255958]
call fcn.1401d0c68
mov edx, 0x400
lea rcx, str.disableUpdate
mov rbx, rax
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
lea r9, [0x140255958]
mov r8, rax
mov qword [rsp + 0x28], rdi
lea rdx, str.disableUpdate
mov qword [rsp + 0x20], rbx
call fcn.1400a2b5c
cmp dword [r14 + 0x9ec], edi
je 0x140005b43
xor r9d, r9d
mov dword [rsp + 0x20], edi
mov r8d, 0xcc9
lea rdx, str...meshcore_agentcore.c
lea rcx, str.SelfUpdate____Disabling_future_updates...
call fcn.14009fd00
mov rcx, qword [r14 + 0x10]
lea rdx, str.require_zip_reader_
mov r9d, 0xe08
call fcn.14001a28c
mov rcx, qword [r14 + 0x10]
or edi, 0xffffffff
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.isZip
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
lea ebx, [rdi - 1]
mov edx, ebx
mov r8d, edi
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
mov rdx, r15
call fcn.14001d6a0
mov rcx, qword [r14 + 0x10]
lea r15d, [rdi + 2]
mov edx, r15d
call fcn.140019788
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001c5d0
xor r13d, r13d
test eax, eax
je 0x140005d17
cmp dword [r14 + 0x9ec], r13d
je 0x140005be6
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, 0xcd3
lea rdx, str...meshcore_agentcore.c
lea rcx, str.SelfUpdate____Unzipping_update...
call fcn.14009fd00
mov rcx, qword [r14 + 0x10]
lea rdx, str.require_update_helper_
mov r9d, 0xe08
call fcn.14001a28c
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.start
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, ebx
call fcn.14001bab0
mov rdx, qword [rbp + 0x18]
mov rcx, qword [r14 + 0x10]
call fcn.14001d6a0
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.140019788
test eax, eax
jne 0x140005cbb
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.then
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, ebx
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
lea rdx, [0x140004dec]
mov ebx, 0x18075380
mov esi, 6
mov r9d, ebx
mov dword [rsp + 0x20], esi
mov r8d, edi
call fcn.14001de38
mov rcx, qword [r14 + 0x10]
lea rdx, [0x140004e58]
mov r9d, ebx
mov dword [rsp + 0x20], esi
mov r8d, edi
call fcn.14001de38
mov rcx, qword [r14 + 0x10]
lea edx, [rsi - 4]
call fcn.140019788
jmp 0x140005d06
cmp dword [r14 + 0x9ec], r13d
je 0x140005d06
mov rcx, qword [r14 + 0x10]
xor r8d, r8d
mov edx, edi
call fcn.14001c930
mov r9, rax
lea r8, str.SelfUpdate____Error_Unzipping:__s
mov edx, 0x1000
mov rcx, rsi
call fcn.140001138
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, 0xce3
lea rdx, str...meshcore_agentcore.c
mov rcx, rsi
call fcn.14009fd00
mov rcx, qword [r14 + 0x10]
mov edx, r12d
call fcn.14001b768
jmp 0x1400063a5
mov rcx, qword [r14 + 0x10]
mov edx, r12d
call fcn.14001b768
mov rcx, r14
call fcn.140004a7c
jmp 0x1400063a5
cmp dword [r14 + 0x9ec], edi
je 0x140005d59
mov r8d, 0xcef
lea rcx, str.SelfUpdate____Download_Complete..._Hash_FAILED__aborting_update...
lea rdx, str...meshcore_agentcore.c
mov dword [rsp + 0x20], edi
xor r9d, r9d
call fcn.14009fd00
mov rcx, r15
call fcn.140095348
jmp 0x1400063a5
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, bx
mov word [0x1402cba40], ax
call qword [sym.imp.WS2_32.dll_htons]
xor edi, edi
mov word [0x1402cba42], ax
lea rcx, [0x1402cba44]
cmp dword [r14 + 0x9e4], edi
je 0x140005da7
xor edx, edx
lea r8d, [rdi + 0x30]
call fcn.1401c8c30
jmp 0x140005e01
cmp dword [r14 + 0x9e8], edi
je 0x140005deb
mov edx, 0xffff
mov r8d, 0x30
call fcn.1401c8c30
cmp dword [r14 + 0x9ec], edi
je 0x140005e01
xor r9d, r9d
mov dword [rsp + 0x20], edi
mov r8d, 0xc8f
lea rdx, str...meshcore_agentcore.c
lea rcx, str.SelfUpdate____Forcing_Update...
call fcn.14009fd00
jmp 0x140005e01
mov ebx, 0x30
lea r8, [r14 + 0xa0c]
mov r9d, ebx
mov edx, ebx
call section..text
mov r9d, gethostname
lea r8, [0x1402cba40]
mov rcx, r15
jmp 0x14000591c
mov edx, 0x400
lea rcx, str.CoreModule
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.1400a349c
mov ecx, dword [r14 + 0x8c]
lea rdi, [0x1402cba40]
neg ecx
mov ebx, 0x30
mov rcx, rdi
mov r15, rax
sbb esi, esi
xor edx, edx
and esi, ebx
lea r8d, [rbx + 4]
add esi, r12d
call fcn.1401c8c30
lea ecx, [rbx - 0x25]
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402cba40], ax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402cba42], ax
cmp dword [r14 + 0x8c], 0
jne 0x140005ea7
test r15, r15
je 0x140005ea7
mov r9d, ebx
lea rcx, [0x1402cba44]
mov r8, r15
mov edx, ebx
call section..text
lea esi, [rbx + 4]
mov r9d, esi
mov r8, rdi
jmp 0x140005918
xor ecx, ecx
test rcx, rcx
je 0x1400063a5
movsxd rax, dword [rbp + 8]
mov r8d, 0xa
mov rdi, qword [rbp + 0x18]
mov rdx, r15
mov rcx, qword [r14 + 0x48]
mov r9, rdi
mov qword [rsp + 0x20], rax
call fcn.1400a2e8c
mov rdx, r13
mov rcx, r15
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.1400a349c
lea rdx, [rsi + 4]
mov qword [rbp], rax
mov r8, rbx
mov rcx, rax
call fcn.1401c8de0
test eax, eax
je 0x140005f39
mov rdx, r13
mov rcx, r15
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r8, rax
mov rdx, r15
call fcn.1400a369c
mov rcx, r14
call fcn.1400040cc
mov ecx, listen
jmp 0x1400058f0
mov rcx, r14
call fcn.1400040cc
mov r15, rax
test rax, rax
je 0x140005faf
mov r8, qword [rbp + 8]
lea rdx, [rdi + 4]
add r8d, 0xfffffffc
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
mov rcx, rax
call fcn.14008a8c8
test eax, eax
jne 0x140005f7e
xor edx, edx
mov rcx, r15
call fcn.1400196e4
test eax, eax
je 0x140005faf
xor r8d, r8d
or edx, 0xffffffff
mov rcx, r15
call fcn.14001c930
mov r9, rax
lea r8, [0x14025431c]
mov edx, 0x1000
lea rcx, [0x1402caa40]
call fcn.140001138
mov rcx, r15
call fcn.14001e554
mov rcx, qword [r14 + 0x48]
call fcn.1400a3a70
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402cba40], ax
call qword [sym.imp.WS2_32.dll_htons]
mov r8, qword [rbp]
lea rcx, [0x1402cba44]
mov r9, rbx
mov word [0x1402cba42], ax
mov edx, 0xfffc
call section..text
mov r9d, gethostname
jmp 0x140005911
cmp r13d, r12d
jne 0x1400063a5
lea r15, str.CoreModule
mov edx, 0x400
mov rcx, r15
call fcn.1401d0c68
mov rcx, qword [r14 + 0x48]
mov r8, rax
mov rdx, r15
call fcn.1400a369c
mov rcx, r14
call fcn.1400040cc
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, bx
jmp 0x1400058fa
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
call fcn.140002e84
mov rcx, qword [r14 + 0x10]
lea r8, str.emit
or edi, 0xffffffff
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
lea r12d, [rdi - 1]
mov edx, r12d
mov r8d, edi
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
lea rdx, str.Command
call fcn.14001d6a0
cmp byte [rsi], 0x7b
mov rcx, qword [r14 + 0x10]
jne 0x140006328
call fcn.14001d8d0
mov rcx, qword [r14 + 0x10]
lea r8, str.JSON
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
lea r8, str.parse
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi - 2]
mov r8d, edi
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
call fcn.14001e5f0
mov rcx, qword [r14 + 0x10]
mov r8, r13
mov rdx, rsi
call fcn.14001d5ec
mov rcx, qword [r14 + 0x10]
lea r15d, [rdi + 2]
mov edx, r15d
call fcn.1400196e4
mov rcx, qword [r14 + 0x10]
test eax, eax
je 0x140006117
call fcn.14001e554
mov rcx, qword [r14 + 0x10]
mov r8, r13
mov rdx, rsi
call fcn.14001d5ec
jmp 0x140006372
lea r8, str.action
mov edx, edi
call fcn.14001ae9c
test eax, eax
je 0x140006372
mov rcx, qword [r14 + 0x10]
lea r9, [0x140254268]
and qword [rsp + 0x20], 0
lea r8, str.action
mov edx, edi
call fcn.140064718
lea rdx, str.ping
mov rcx, rax
mov rbx, rax
call fcn.1401dc080
test eax, eax
jne 0x1400061d4
cmp dword [r14 + 0xb48], eax
jne 0x1400061c8
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
call fcn.140002e84
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.emit
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, r12d
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
lea rdx, str.idleTimeoutModeChanged
call fcn.14001d6a0
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.140019788
mov rcx, qword [r14 + 0x10]
call fcn.14001e5f0
mov dword [r14 + 0xb48], r15d
jmp 0x140006372
lea rdx, str.pong
mov rcx, rbx
call fcn.1401dc080
test eax, eax
jne 0x140006372
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
call fcn.140002e84
mov rcx, qword [r14 + 0x10]
lea r8, [0x140254620]
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001c2c0
test rax, rax
je 0x14000631d
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.shift
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, r12d
call fcn.14001bab0
mov rbx, qword [r14 + 0x10]
xor edx, edx
mov rcx, rbx
lea r8d, [rdx + 2]
call fcn.140019608
xor r8d, r8d
mov edx, eax
mov rcx, rbx
call fcn.140039eac
mov rcx, qword [r14 + 0x10]
lea r8, [0x1402546d0]
mov edx, edi
call fcn.14001ae9c
test eax, eax
je 0x1400062dd
mov rcx, qword [r14 + 0x10]
call fcn.14001d8d0
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str.clearTimeout
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, r12d
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
lea r8, [0x1402546d0]
mov edx, 0xfffffffc
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.140019788
mov rcx, qword [r14 + 0x10]
call fcn.14001e5f0
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001baf8
mov rcx, qword [r14 + 0x10]
lea r8, str._res
mov edx, edi
call fcn.14001a9d0
mov rcx, qword [r14 + 0x10]
mov r8d, edi
mov edx, r12d
call fcn.14001bab0
mov rcx, qword [r14 + 0x10]
xor edx, edx
call fcn.140019788
mov rcx, qword [r14 + 0x10]
call fcn.14001e5f0
mov rcx, qword [r14 + 0x10]
call fcn.14001e5f0
jmp 0x140006372
xor edx, edx
lea r8d, [rdx + 3]
call fcn.14001e23c
mov rcx, qword [r14 + 0x10]
mov edi, 0xfffffffc
mov edx, edi
call fcn.14001bbc8
mov rcx, qword [r14 + 0x10]
mov r9, r13
mov r8, rsi
mov edx, edi
call fcn.1400195a4
mov rcx, qword [r14 + 0x10]
lea r15d, [rdi + 5]
mov r9, r13
mov dword [rsp + 0x20], r15d
xor r8d, r8d
mov edx, edi
call fcn.14001df90
lea r15d, [rdi + 6]
mov rcx, qword [r14 + 0x10]
mov edx, 2
call fcn.140019788
test eax, eax
je 0x140006399
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x140006399
lea rdx, [0x140254268]
call fcn.140065310
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.14001e434
mov rcx, qword [rbp + 0x160]
xor rcx, rbp
call fcn.1401c7760
lea rsp, [rbp + 0x178]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret