Function at 0x140004820
Capabilities:
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a8
lea rbp, [rsp + 0x30]
mov rax, qword [0x1402b9f00]
xor rax, rbp
mov qword [rbp + 0x160], rax
mov r13, rcx
mov qword [rbp + 0x20], rcx
movzx ecx, word [r8]
mov rsi, r8
movsxd r15, r9d
mov r14, rdx
call qword [sym.imp.WS2_32.dll_ntohs]
xor r12d, r12d
mov word [rbp + 8], ax
movzx edi, ax
cmp dword [r14 + 0x9ec], r12d
je 0x140004896
movzx ebx, ax
lea rcx, str.ProcessCommand__u_..._n
mov edx, ebx
call fcn.140001090
mov edx, ebx
lea rcx, str.ProcessCommand__u_...
call fcn.1400976f0
cmp dword [r14 + 0xb30], 3
je 0x140004de8
mov rcx, qword [r13 + 0xe8]
mov rcx, qword [rcx + 0x2a8]
call fcn.140185110
movzx edx, di
mov r12, rax
mov qword [rbp], rax
sub edx, 1
je 0x140004b4c
sub edx, 1
je 0x140004920
cmp edx, 2
jne 0x140004dd2
cmp dword [r14 + 0x9ec], 0
je 0x1400048fa
lea rcx, str.Authentication_Complete..._n
call fcn.140001090
lea rcx, str.Authentication_Complete...
call fcn.1400976f0
or dword [r14 + 0xb30], 2
cmp dword [r14 + 0xb30], 3
jne 0x140004dd2
mov rdx, r14
mov rcx, r13
call fcn.140004168
jmp 0x140004dd2
cmp r15d, 8
jle 0x140004dd2
cmp dword [r14 + 0x9ec], 0
je 0x140004940
lea rcx, str.Processing_Authentication_Verification...
call fcn.1400976f0
mov eax, dword [rsp]
sub rsp, 0x20
lea rdi, [rsp + 0x30]
mov eax, dword [rdi]
mov qword [rbp + 0x18], rdi
lea rax, [rsi + 4]
mov qword [rdi], rax
movzx ecx, word [rsi + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ecx, ax
lea rax, [rsi + 4]
add rax, rcx
mov word [rdi + 8], cx
mov qword [rdi + 0xa], rax
movzx eax, r15w
sub ax, cx
sub ax, 4
mov word [rdi + 0x12], ax
lea eax, [rcx + 4]
cmp r15d, eax
jle 0x140004dd2
and qword [rbp + 0x10], 0
mov r8d, ecx
mov ebx, 0x30
lea rcx, [rbp + 0x10]
mov rdx, rdi
mov dword [rbp + 8], ebx
call fcn.1400b6b10
test rax, rax
jne 0x1400049c2
lea rcx, str.Invalid_server_certificate_r_n
call fcn.140001090
jmp 0x140004dd2
call fcn.1400b82e0
mov rcx, qword [rbp + 0x10]
lea rsi, [0x1402c1900]
mov r8, rsi
lea r9, [rbp + 8]
mov rdx, rax
call fcn.1400b94b0
lea rdi, [r14 + 0xa34]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.1401c27a0
test eax, eax
je 0x140004a30
call fcn.1400b82d0
mov rcx, qword [rbp + 0x10]
lea r9, [rbp + 8]
mov rdx, rax
mov r8, rsi
call fcn.1400b94b0
mov r8d, 0x20
mov rdx, rdi
mov rcx, rsi
call fcn.1401c27a0
test eax, eax
je 0x140004a30
lea rcx, str.Server_certificate_mismatch_r_n
jmp 0x1400049b8
lea rcx, [rbp + 0x30]
call fcn.1400b3fb0
lea rdi, [0x1402c2900]
mov rcx, r12
mov rdx, rdi
call fcn.14008d694
mov r8, rbx
lea rcx, [rbp + 0x30]
mov rdx, rdi
call fcn.1400b4040
lea rdx, [r14 + 0xb00]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400b4040
lea rdx, [r14 + 0xad0]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400b4040
lea rdx, [rbp + 0x30]
mov rcx, rsi
call fcn.1400b3f90
mov rcx, qword [rbp + 0x10]
call fcn.1400ba2e0
mov rcx, rax
mov r15, rax
call fcn.1400b7140
mov r9, qword [rbp + 0x18]
mov r8d, ebx
mov qword [rsp + 0x28], rax
mov rdx, rsi
mov r13, rax
movzx ecx, word [r9 + 0x12]
mov r9, qword [r9 + 0xa]
mov dword [rsp + 0x20], ecx
mov ecx, 0x2a1
call fcn.1400b7a40
mov r12d, 1
cmp eax, r12d
jne 0x140004b0c
and qword [rsp + 0x28], 0
lea r8d, [r12 + 0x10]
mov rcx, qword [r14 + 0x48]
lea rdx, str.ServerTlsCertHash
or dword [r14 + 0xb30], r12d
mov r9, rdi
mov qword [rsp + 0x20], rbx
call fcn.14009a3d8
mov rdx, qword [rbp + 0x20]
mov rcx, r14
call fcn.140004298
jmp 0x140004b2e
lea rcx, str.Invalid_server_signature_r_n
call fcn.140001090
cmp dword [r14 + 0x9ec], 0
je 0x140004b2e
lea rcx, str.Invalid_Server_Signature
call fcn.1400976f0
mov rcx, r13
call fcn.1400b9710
mov rcx, r15
call fcn.1400b6f00
mov rcx, qword [rbp + 0x10]
call fcn.1400b6a40
jmp 0x140004d1c
cmp r15d, 0x62
jne 0x140004dd2
cmp dword [r14 + 0x9ec], 0
je 0x140004b6c
lea rcx, str.Processing_Authentication_Request...
call fcn.1400976f0
lea rdi, [0x1402c2900]
mov rcx, r12
mov rdx, rdi
call fcn.14008d694
lea r15, [rsi + 2]
mov ebx, 0x30
mov r8d, ebx
mov rdx, r15
mov rcx, rdi
call fcn.1401c27a0
test eax, eax
je 0x140004bf5
mov dword [rbp + 0x10], ebx
test r12, r12
je 0x140004bb8
call fcn.1400b82e0
mov rdx, rax
lea r9, [rbp + 0x10]
mov r8, rdi
mov rcx, r12
call fcn.1400b94b0
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.1401c27a0
test eax, eax
je 0x140004bf5
lea rcx, str.Bad_server_certificate_hash_r_n
call fcn.140001090
cmp dword [r14 + 0x9ec], 0
je 0x140004dd2
lea rcx, str.Bad_server_certificate_hash
call fcn.1400976f0
jmp 0x140004dd2
lea rcx, [r14 + 0xad0]
mov r9, rbx
lea r8, [rsi + 0x32]
mov rdx, rbx
call section..text
mov ecx, 2
call qword [sym.imp.WS2_32.dll_htons]
lea rcx, [0x1402c2904]
mov word [0x1402c2900], ax
mov qword [rbp + 0x18], rcx
lea rdx, [rbp + 0x18]
mov rcx, qword [r14 + 0xa70]
call fcn.1400b6bf0
movzx ecx, ax
mov dword [rbp + 0x10], eax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402c2902], ax
cmp qword [r14 + 0xa78], 0
je 0x140004d25
lea rcx, [rbp + 0x30]
call fcn.1400b3fb0
mov r8, rbx
lea rcx, [rbp + 0x30]
mov rdx, r15
call fcn.1400b4040
mov r8, rbx
lea rdx, [r14 + 0xad0]
lea rcx, [rbp + 0x30]
call fcn.1400b4040
lea rdx, [r14 + 0xb00]
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.1400b4040
lea rsi, [0x1402c1900]
mov rcx, rsi
lea rdx, [rbp + 0x30]
call fcn.1400b3f90
mov rcx, qword [r14 + 0xa78]
call fcn.1400b7140
movsx r15, word [rbp + 0x10]
lea r9, [rdi + 4]
mov qword [rsp + 0x28], rax
mov edx, 0xfffc
sub edx, r15d
mov r14, rax
mov dword [rbp + 8], edx
lea rax, [rbp + 8]
mov rdx, rsi
mov qword [rsp + 0x20], rax
add r9, r15
mov r8d, ebx
mov ecx, 0x2a1
call fcn.1400b78f0
mov r12d, 1
cmp eax, r12d
jne 0x140004d14
mov r9d, dword [rbp + 8]
lea edx, [r12 + 1]
add r9d, 4
mov r8, rdi
add r9d, r15d
mov rcx, r13
call fcn.14009c630
mov rcx, r14
call fcn.1400b9710
mov r12, qword [rbp]
jmp 0x140004dd2
mov r9, rbx
lea rcx, [0x1402c1900]
mov r8, r15
mov edx, 0x1000
call section..text
mov r9, rbx
lea r8, [r14 + 0xad0]
mov edx, 0xfd0
lea rcx, [0x1402c1930]
call section..text
lea r8, [r14 + 0xb00]
mov r9, rbx
mov edx, 0xfa0
lea rcx, [0x1402c1960]
call section..text
mov rcx, qword [r14 + 0xa68]
lea r9, [rbp]
and qword [rbp], 0
call fcn.140010bb8
mov dword [rbp + 8], eax
test eax, eax
jle 0x140004dd2
movsx rbx, word [rbp + 0x10]
lea rcx, [rdi + 4]
mov r8, qword [rbp]
mov edx, 0xfffc
sub rdx, rbx
movsxd r9, eax
add rcx, rbx
call section..text
mov r9d, dword [rbp + 8]
mov r8, rdi
add r9d, 4
mov edx, 2
add r9d, ebx
mov rcx, r13
call fcn.14009c630
mov rcx, qword [rbp]
call fcn.1401c8c7c
test r12, r12
je 0x1400059f9
mov rcx, r12
call fcn.1400b6a40
jmp 0x1400059f9
mov eax, 0xa
cmp di, ax
jb 0x1400059f9
cmp byte [rsi], 0x7b
je 0x1400058bb
mov eax, 0x3e8
cmp di, ax
jae 0x1400058bb
mov r13d, 4
cmp r15d, r13d
jl 0x1400059f9
movzx ecx, word [rsi + 2]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx ebx, ax
mov word [rbp + 0x10], ax
cmp dword [r14 + 0x9ec], r12d
je 0x140004e66
movzx ebx, ax
lea rcx, str.BinaryCommand__u___u_..._n
movzx edi, di
mov r8d, ebx
mov edx, edi
call fcn.140001090
mov r8d, ebx
lea rcx, str.BinaryCommand__u___u_...
mov edx, edi
call fcn.1400976f0
movzx edi, word [rbp + 8]
movzx ebx, word [rbp + 0x10]
movzx ecx, di
sub ecx, 0xa
je 0x140004ea4
sub ecx, 1
je 0x140005665
sub ecx, 1
je 0x1400055c8
sub ecx, 1
je 0x140005205
sub ecx, 1
je 0x14000515c
sub ecx, 2
je 0x140004f88
cmp ecx, r13d
jne 0x1400059f9
lea rax, [rsi + 0x34]
mov qword [rbp + 0x18], rax
lea rax, [r15 - 0x34]
mov qword [rbp + 8], rax
cmp dword [r14 + 0x84], r12d
jne 0x1400059f9
cmp r15, 0x34
jbe 0x140005874
mov r12d, 0x400
lea r15, str.CoreModule
mov edx, r12d
mov rcx, r15
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.14009ad24
mov qword [rbp], rax
mov ebx, 0x30
test rax, rax
je 0x140004f14
lea rdx, [rsi + 4]
mov r8d, ebx
mov rcx, rax
call fcn.1401c27a0
test eax, eax
je 0x14000583c
and qword [r14 + 0x9f0], 0
cmp di, 0x14
jne 0x14000570b
mov rdx, qword [rbp + 8]
lea r9, [rbp]
and qword [rbp], 0
lea rcx, [rsi + 0x34]
xor r8d, r8d
call fcn.14004dd60
test eax, eax
jne 0x1400059f9
mov rdx, qword [rbp]
mov rcx, qword [r14]
call fcn.14008edec
mov rdx, qword [rbp + 8]
lea r9, [rbp]
mov r8, rax
mov qword [rbp + 0x28], rax
lea rcx, [rsi + 0x34]
call fcn.14004dd60
test eax, eax
jne 0x140005700
mov rcx, qword [rbp + 0x28]
mov rax, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp + 8], rax
jmp 0x140005702
lea rcx, str.Server_verified_meshcore...
call fcn.140001090
cmp qword [r14 + 0x9f0], r12
je 0x14000514b
mov rcx, qword [r14 + 0x10]
call fcn.14001c59c
mov rcx, qword [r14 + 0x10]
lea r8, str.clearTimeout
or edx, 0xffffffff
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
mov edx, 0xfffffffe
call fcn.14001a840
mov rdx, qword [r14 + 0x9f0]
mov rcx, qword [r14 + 0x10]
call fcn.14001cf3c
mov rcx, qword [r14 + 0x10]
mov edx, 1
call fcn.140018680
mov rcx, qword [r14 + 0x10]
call fcn.14001d1b0
and qword [r14 + 0x9f0], r12
lea r15, str.CoreModule
mov r12d, 0x400
mov rcx, r15
mov edx, r12d
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
xor r9d, r9d
and qword [rsp + 0x20], 0
mov r8, rax
mov rdx, r15
call fcn.14009a8cc
movsxd rdi, eax
mov dword [rbp + 8], edi
cmp edi, r13d
jg 0x140005040
lea rcx, str._meshcore_not_found..._n
jmp 0x140005152
lea rcx, str._Launching_meshcore..._n
call fcn.140001090
mov r9d, dword [r14 + 0x9fc]
test r9d, r9d
je 0x1400050cd
lea r8, str.attachDebugger__webport:__d__wait:_1__.then_function__prt___console.log_Point_Browser_for_Debug_to_port:___prt______n
mov edx, 0xff
lea rcx, [rbp + 0x30]
call fcn.1400010e4
movsxd rbx, eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea esi, [rbx + rdi]
movsxd rdi, esi
mov rcx, rdi
call fcn.14008ee88
mov rdx, r12
mov rcx, r15
mov r13, rax
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
lea r9, [r13 - 4]
add r9, rbx
mov qword [rsp + 0x20], rdi
mov r8, rax
mov rdx, r15
call fcn.14009a8cc
mov ecx, dword [rbp + 8]
lea r8, [rbp + 0x30]
add ecx, 0xfffffffc
mov r9, rbx
movsxd rdx, ecx
lea rcx, [r13 + 4]
call section..text
lea edi, [rsi - 4]
jmp 0x140005102
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.14008ee88
mov rdx, r12
mov rcx, r15
mov r13, rax
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r9, r13
mov r8, rax
mov qword [rsp + 0x20], rdi
mov rdx, r15
call fcn.14009a8cc
mov rcx, qword [r14 + 0x10]
lea r8d, [rdi - 4]
lea rdx, [r13 + 4]
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
call fcn.1400826a0
test eax, eax
jne 0x140005135
mov rcx, qword [r14 + 0x10]
xor edx, edx
call fcn.1400185dc
test eax, eax
je 0x14000513e
mov rcx, qword [r14 + 0x10]
call fcn.14001d1b0
mov rcx, r13
call fcn.1401c8c7c
jmp 0x1400059f9
lea rcx, str._meshcore_already_running..._n
call fcn.140001090
jmp 0x1400059f9
mov rcx, qword [r14 + 0x38]
lea rdx, str..update.exe
xor r8d, r8d
call fcn.14000312c
mov r14, rax
lea rbx, [0x1402be900]
or edi, 0xffffffff
mov r12d, 1
and qword [rbp], 0
mov r9d, edi
mov dword [rsp + 0x28], 0x1000
mov r8, r14
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r8, [0x140296908]
mov rdx, rbx
lea rcx, [rbp]
call fcn.1401c40cc
mov r9, qword [rbp]
test r9, r9
je 0x1400051ee
lea eax, [r15 - 4]
mov r8, r12
movsxd rdx, eax
lea rcx, [rsi + 4]
call fcn.1401c8b20
mov rcx, qword [rbp]
mov rbx, rax
call fcn.1401c41b4
test rbx, rbx
jne 0x1400051fb
lea rbx, [0x1402be900]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140005182
mov ecx, reloc.WS2_32.dll_ntohl
jmp 0x140005782
mov rcx, qword [r14 + 0x38]
lea rdx, str..update.exe
xor r8d, r8d
call fcn.14000312c
mov qword [rbp + 0x18], rax
mov rdi, rax
cmp r15d, r13d
jne 0x14000523d
cmp dword [r14 + 0x9e4], r12d
je 0x1400055bb
lea rcx, str.SelfUpdate____Starting_download...
jmp 0x1400055a9
cmp r15d, 0x34
jne 0x1400059f9
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.140003d64
test eax, eax
jne 0x140005599
lea rdx, [rsi + 4]
lea r8d, [r15 - 4]
lea rcx, [rbp + 0x130]
call fcn.1401c27a0
test eax, eax
jne 0x140005599
mov rax, qword [r14 + 0x10]
mov r15, qword [rax + 0x70]
sub r15, qword [rax + 0x68]
sar r15, 4
cmp dword [r14 + 0x9e4], r12d
je 0x1400052ac
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, str.SelfUpdate____Download_Complete..._Hash_verified
xor edx, edx
call fcn.1400975c8
lea rsi, [0x1402c1900]
cmp dword [r14 + 0x9e8], r12d
je 0x140005345
mov r9, qword [r14 + 0x38]
lea r8, str._s.zip
mov edx, 0x1000
mov rcx, rsi
call fcn.1400010e4
mov rdx, rsi
lea rcx, [rbp]
call fcn.140096c3c
mov ebx, eax
test eax, eax
jne 0x14000530b
mov rdx, qword [r14 + 0x38]
lea rcx, [rbp]
call fcn.140096c3c
mov ebx, eax
cmp dword [r14 + 0x9e4], r12d
je 0x14000532d
lea rcx, str.SelfUpdate____Overriding_update_with_same_version...
jmp 0x14000531b
cmp dword [r14 + 0x9e4], r12d
je 0x14000532d
lea rcx, str.SelfUpdate____Overriding_update_with_provided_zip...
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
xor edx, edx
call fcn.1400975c8
mov rdx, qword [rbp]
mov r8d, ebx
mov rcx, rdi
call fcn.140096d80
cmp dword [r14 + 0x9e8], r12d
jne 0x14000534e
cmp dword [r14 + 0x9e0], r12d
je 0x1400053be
mov edx, 0x4000
lea rcx, [0x14024f238]
call fcn.1401c8c84
mov edx, 0x400
lea rcx, str.disableUpdate
mov rbx, rax
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
lea r9, [0x14024f238]
xor r13d, r13d
lea rdx, str.disableUpdate
mov qword [rsp + 0x28], r13
mov r8, rax
mov qword [rsp + 0x20], rbx
call fcn.14009a3d8
cmp dword [r14 + 0x9e4], r13d
je 0x1400053c1
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, str.SelfUpdate____Disabling_future_updates...
xor edx, edx
call fcn.1400975c8
jmp 0x1400053c1
xor r13d, r13d
mov rcx, qword [r14 + 0x10]
lea rdx, str.require_zip_reader_
mov r9d, 0xe08
call fcn.140019168
mov rcx, qword [r14 + 0x10]
or edi, 0xffffffff
mov edx, edi
call fcn.14001a87c
mov rcx, qword [r14 + 0x10]
lea r8, str.isZip
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi - 1]
call fcn.14001a840
mov rbx, qword [rbp + 0x18]
mov rcx, qword [r14 + 0x10]
mov rdx, rbx
call fcn.14001c36c
mov rcx, qword [r14 + 0x10]
lea r12d, [rdi + 2]
mov edx, r12d
call fcn.140018680
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001b3a8
test eax, eax
je 0x140005580
cmp dword [r14 + 0x9e4], r13d
je 0x140005458
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, str.SelfUpdate____Unzipping_update...
xor edx, edx
call fcn.1400975c8
mov rcx, qword [r14 + 0x10]
lea rdx, str.require_update_helper_
mov r9d, 0xe08
call fcn.140019168
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001a87c
mov rcx, qword [r14 + 0x10]
lea r8, str.start
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
mov edx, 0xfffffffe
call fcn.14001a840
mov rcx, qword [r14 + 0x10]
mov rdx, rbx
call fcn.14001c36c
mov rcx, qword [r14 + 0x10]
mov edx, r12d
call fcn.140018680
test eax, eax
jne 0x14000552c
mov rcx, qword [r14 + 0x10]
mov edx, edi
call fcn.14001a87c
mov rcx, qword [r14 + 0x10]
lea r8, str.then
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
mov edx, 0xfffffffe
call fcn.14001a840
mov rcx, qword [r14 + 0x10]
lea rdx, [0x140004730]
mov ebx, 0x18075380
mov esi, 6
mov r9d, ebx
mov dword [rsp + 0x20], esi
mov r8d, edi
call fcn.14001ca94
mov rcx, qword [r14 + 0x10]
lea rdx, [0x140004794]
mov r9d, ebx
mov dword [rsp + 0x20], esi
mov r8d, edi
call fcn.14001ca94
mov rcx, qword [r14 + 0x10]
lea edx, [rsi - 4]
call fcn.140018680
jmp 0x14000556f
cmp dword [r14 + 0x9e4], r13d
je 0x14000556f
mov rcx, qword [r14 + 0x10]
xor r8d, r8d
mov edx, edi
call fcn.14001b708
mov r9, rax
lea r8, str.SelfUpdate____Error_Unzipping:__s
mov edx, 0x1000
mov rcx, rsi
call fcn.1400010e4
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400975c8
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.14001a528
jmp 0x1400059f9
mov rcx, qword [r14 + 0x10]
mov edx, r15d
call fcn.14001a528
mov rcx, r14
call fcn.140004570
jmp 0x1400059f9
cmp dword [r14 + 0x9e4], r12d
je 0x1400055bb
lea rcx, str.SelfUpdate____Download_Complete..._Hash_FAILED__aborting_update...
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
xor edx, edx
call fcn.1400975c8
mov rcx, rdi
call fcn.14008ce9c
jmp 0x1400059f9
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, bx
mov word [0x1402c2900], ax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402c2902], ax
lea rcx, [0x1402c2904]
cmp dword [r14 + 0x9dc], r12d
je 0x140005607
xor edx, edx
lea r8d, [rdx + 0x30]
call fcn.1401c25f0
jmp 0x14000565a
cmp dword [r14 + 0x9e0], r12d
je 0x140005644
mov edx, 0xffff
mov r8d, 0x30
call fcn.1401c25f0
cmp dword [r14 + 0x9e4], r12d
je 0x14000565a
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, str.SelfUpdate____Forcing_Update...
xor edx, edx
call fcn.1400975c8
jmp 0x14000565a
mov ebx, 0x30
lea r8, [r14 + 0xa04]
mov edx, ebx
mov r9, rbx
call section..text
mov r9d, gethostname
jmp 0x1400057a3
mov edx, 0x400
lea rcx, str.CoreModule
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.14009ad24
mov ecx, dword [r14 + 0x84]
lea rdi, [0x1402c2900]
neg ecx
mov ebx, 0x30
mov rcx, rdi
mov r15, rax
sbb esi, esi
xor edx, edx
and esi, ebx
lea r8d, [rbx + 4]
add esi, r13d
call fcn.1401c25f0
lea ecx, [rbx - 0x25]
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402c2900], ax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402c2902], ax
cmp dword [r14 + 0x84], r12d
jne 0x1400056f5
test r15, r15
je 0x1400056f5
mov r9d, ebx
lea rcx, [0x1402c2904]
mov r8, r15
mov edx, ebx
call section..text
lea esi, [rbx + 4]
mov r9d, esi
mov r8, rdi
jmp 0x1400057aa
xor ecx, ecx
test rcx, rcx
je 0x1400059f9
movsxd rax, dword [rbp + 8]
mov r8d, 0xa
mov rdi, qword [rbp + 0x18]
mov rdx, r15
mov rcx, qword [r14 + 0x48]
mov r9, rdi
mov qword [rsp + 0x20], rax
call fcn.14009a70c
mov rdx, r12
mov rcx, r15
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r8, rax
call fcn.14009ad24
lea rdx, [rsi + 4]
mov qword [rbp], rax
mov r8, rbx
mov rcx, rax
call fcn.1401c27a0
test eax, eax
je 0x1400057bd
mov rdx, r12
mov rcx, r15
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r8, rax
mov rdx, r15
call fcn.14009af2c
mov rcx, r14
call fcn.140003bc4
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402c2900], ax
call qword [sym.imp.WS2_32.dll_htons]
mov word [0x1402c2902], ax
mov r9d, r13d
lea r8, [0x1402c2900]
mov rcx, qword [rbp + 0x20]
mov edx, 2
call fcn.14009c630
jmp 0x1400059f9
mov rcx, r14
call fcn.140003bc4
mov r15, rax
test rax, rax
je 0x140005833
mov r8, qword [rbp + 8]
lea rdx, [rdi + 4]
add r8d, 0xfffffffc
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
mov rcx, rax
call fcn.1400826a0
test eax, eax
jne 0x140005802
xor edx, edx
mov rcx, r15
call fcn.1400185dc
test eax, eax
je 0x140005833
xor r8d, r8d
or edx, 0xffffffff
mov rcx, r15
call fcn.14001b708
mov r9, rax
lea r8, [0x14024e20c]
mov edx, 0x1000
lea rcx, [0x1402c1900]
call fcn.1400010e4
mov rcx, r15
call fcn.14001d1b0
mov rcx, qword [r14 + 0x48]
call fcn.14009b28c
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, word [rbp + 0x10]
mov word [0x1402c2900], ax
call qword [sym.imp.WS2_32.dll_htons]
mov r8, qword [rbp]
lea rcx, [0x1402c2904]
mov word [0x1402c2902], ax
mov edx, 0xfffc
jmp 0x140005652
cmp r15d, r13d
jne 0x1400059f9
lea r15, str.CoreModule
mov edx, 0x400
mov rcx, r15
call fcn.1401c8c84
mov rcx, qword [r14 + 0x48]
mov r8, rax
mov rdx, r15
call fcn.14009af2c
mov rcx, r14
call fcn.140003bc4
mov ecx, listen
call qword [sym.imp.WS2_32.dll_htons]
movzx ecx, bx
jmp 0x14000578c
mov rdx, qword [r14]
mov rcx, qword [r14 + 0x10]
call fcn.1400029c0
mov rcx, qword [r14 + 0x10]
lea r8, str.emit
or edi, 0xffffffff
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi - 1]
call fcn.14001a840
mov rcx, qword [r14 + 0x10]
lea rdx, str.Command
call fcn.14001c36c
cmp byte [rsi], 0x7b
mov rcx, qword [r14 + 0x10]
jne 0x14000597c
call fcn.14001c59c
mov rcx, qword [r14 + 0x10]
lea r8, str.JSON
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
lea r8, str.parse
mov edx, edi
call fcn.1400198a0
mov rcx, qword [r14 + 0x10]
lea edx, [rdi - 2]
call fcn.14001a840
mov rcx, qword [r14 + 0x10]
call fcn.14001d24c
mov rcx, qword [r14 + 0x10]
mov r8, r15
mov rdx, rsi
call fcn.14001c2b8
mov rcx, qword [r14 + 0x10]
lea r12d, [rdi + 2]
mov edx, r12d
call fcn.1400185dc
test eax, eax
je 0x1400059c6
mov rcx, qword [r14 + 0x10]
call fcn.14001d1b0
mov rcx, qword [r14 + 0x10]
mov r8, r15
mov rdx, rsi
call fcn.14001c2b8
jmp 0x1400059c6
xor edx, edx
lea r8d, [rdx + 3]
call fcn.14001ce98
mov rcx, qword [r14 + 0x10]
mov edi, 0xfffffffc
mov edx, edi
call fcn.14001a94c
mov rcx, qword [r14 + 0x10]
mov r9, r15
mov r8, rsi
mov edx, edi
call fcn.14001849c
mov rcx, qword [r14 + 0x10]
lea r12d, [rdi + 5]
mov r9, r15
mov dword [rsp + 0x20], r12d
xor r8d, r8d
mov edx, edi
call fcn.14001cbec
lea r12d, [rdi + 6]
mov rcx, qword [r14 + 0x10]
mov edx, 2
call fcn.140018680
test eax, eax
je 0x1400059ed
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x1400059ed
lea rdx, [0x14024e158]
call fcn.1400601c4
mov rcx, qword [r14 + 0x10]
mov edx, r12d
call fcn.14001d090
mov rcx, qword [rbp + 0x160]
xor rcx, rbp
call fcn.1401c1120
lea rsp, [rbp + 0x178]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret