Function at 0x1400b897c
Capabilities:
Set registry value
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc40
mov rax, qword [0x1402deed0]
xor rax, rsp
mov qword [rsp + 0xc30], rax
mov r15, rdx
movsxd r14, ecx
mov dword [rsp + 0x68], r14d
lea eax, [r14 + 1]
mov dword [rsp + 0x58], eax
movsxd rdi, eax
shl rdi, 3
mov eax, 0xffffffff
cmp rdi, rax
jae 0x1400b89e8
cmp rax, rdi
je 0x1400b89e8
mov eax, 0xffffffe7
cmp rdi, rax
jae 0x1400b89e8
lea rcx, [rdi + 0x18]
call fcn.1401d5c94
xor ebx, ebx
jmp 0x1400b89ec
xor ebx, ebx
mov eax, ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.14009a4c8
mov rdi, rax
mov qword [rsp + 0x78], rax
mov r13, r14
mov esi, 1
test r14d, r14d
jle 0x1400b8ad7
sub rax, r15
mov qword [rsp + 0x50], r14
or r12, 0xffffffffffffffff
mov r14d, 0xffffffe7
mov rdi, rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, r12d
mov r8, qword [r15]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rsp + 0x60], eax
movsxd r13, eax
mov eax, 0xffffffff
cmp r13, rax
jae 0x1400b8a77
cmp rax, r13
je 0x1400b8a77
cmp r13, r14
jae 0x1400b8a77
lea rcx, [r13 + 0x18]
call fcn.1401d5c94
jmp 0x1400b8a7a
mov rax, rbx
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov rcx, rax
call fcn.14009a4c8
mov qword [rdi + r15], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov ecx, dword [rsp + 0x60]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rax
mov r9d, r12d
mov r8, qword [r15]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add r15, 8
sub qword [rsp + 0x50], rsi
jne 0x1400b8a2b
mov rdi, qword [rsp + 0x78]
movsxd r14, dword [rsp + 0x68]
mov r13, r14
jmp 0x1400b8adb
or r12, 0xffffffffffffffff
cmp r14d, esi
jle 0x1400b8eb5
lea rdx, str._finstall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._funinstall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._fulluninstall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._fullinstall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._install
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._uninstall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b8b70
lea rdx, str._state
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b8bb0
mov rax, qword [rdi + 8]
mov qword [rdi + r13*8], rax
mov ecx, 0x1c
call fcn.1401d5c94
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
call fcn.14009a4c8
mov qword [rdi + 8], rax
lea r8, [0x14025af10]
mov rdx, qword [rax - 0x18]
mov rcx, rax
call fcn.140001138
mov r14d, dword [rsp + 0x58]
cmp r14d, esi
jle 0x1400b8eb5
lea rdx, str._licenses
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b8eb5
lea r12, str._n
mov rcx, r12
call fcn.1400010e4
lea rcx, str._MeshCentral_MeshAgent:_Copyright_2006___2022_Intel_Corporation_n
call fcn.1400010e4
lea rcx, str.________________________https:__github.com_Ylianst_MeshAgent__n
call fcn.1400010e4
lea r15, str._________________________________________________________________________________________n
mov rcx, r15
call fcn.1400010e4
lea rcx, str.___Licensed_under_the_Apache_License__Version_2.0__the__License____n
call fcn.1400010e4
lea rcx, str.___you_may_not_use_this_file_except_in_compliance_with_the_License._n
call fcn.1400010e4
lea rcx, str.___You_may_obtain_a_copy_of_the_License_at_n
call fcn.1400010e4
lea r14, str.____n
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___http:__www.apache.org_licenses_LICENSE_2.0_n
call fcn.1400010e4
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___Unless_required_by_applicable_law_or_agreed_to_in_writing__software_n
call fcn.1400010e4
lea rcx, str.___distributed_under_the_License_is_distributed_on_an__AS_IS__BASIS__n
call fcn.1400010e4
lea rcx, str.___WITHOUT_WARRANTIES_OR_CONDITIONS_OF_ANY_KIND__either_express_or_implied._n
call fcn.1400010e4
lea rcx, str.___See_the_License_for_the_specific_language_governing_permissions_and_n
call fcn.1400010e4
lea rcx, str.___limitations_under_the_License._n_n
call fcn.1400010e4
mov rcx, r12
call fcn.1400010e4
lea rcx, str._Duktape_Javascript_Engine:_Copyright__c__2013_2019_by_Duktape_authors__see_AUTHORS.rst__n
call fcn.1400010e4
lea rcx, str.________________________https:__github.com_svaarala_duktape__n
call fcn.1400010e4
lea rcx, str.________________________http:__opensource.org_licenses_MIT__n
call fcn.1400010e4
mov rcx, r15
call fcn.1400010e4
lea rcx, str.___Permission_is_hereby_granted__free_of_charge__to_any_person_obtaining_a_copy_n
call fcn.1400010e4
lea rcx, str.___of_this_software_and_associated_documentation_files_the__Software____to_deal_n
call fcn.1400010e4
lea rcx, str.___in_the_Software_without_restriction__including_without_limitation_the_rights_n
call fcn.1400010e4
lea rcx, str.___to_use__copy__modify__merge__publish__distribute__sublicense__and___or_sell_n
call fcn.1400010e4
lea rcx, str.___copies_of_the_Software__and_to_permit_persons_to_whom_the_Software_is_n
call fcn.1400010e4
lea rcx, str.___furnished_to_do_so__subject_to_the_following_conditions_:_n
call fcn.1400010e4
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___The_above_copyright_notice_and_this_permission_notice_shall_be_included_in_n
call fcn.1400010e4
lea rcx, str.___all_copies_or_substantial_portions_of_the_Software._n
call fcn.1400010e4
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___THE_SOFTWARE_IS_PROVIDED__AS_IS___WITHOUT_WARRANTY_OF_ANY_KIND__EXPRESS_OR_n
call fcn.1400010e4
lea rcx, str.___IMPLIED__INCLUDING_BUT_NOT_LIMITED_TO_THE_WARRANTIES_OF_MERCHANTABILITY__n
call fcn.1400010e4
lea rcx, str.___FITNESS_FOR_A_PARTICULAR_PURPOSE_AND_NONINFRINGEMENT.IN_NO_EVENT_SHALL_THE_n
call fcn.1400010e4
lea rcx, str.___AUTHORS_OR_COPYRIGHT_HOLDERS_BE_LIABLE_FOR_ANY_CLAIM__DAMAGES_OR_OTHER_n
call fcn.1400010e4
lea rcx, str.___LIABILITY__WHETHER_IN_AN_ACTION_OF_CONTRACT__TORT_OR_OTHERWISE__ARISING_FROM__n
call fcn.1400010e4
lea rcx, str.___OUT_OF_OR_IN_CONNECTION_WITH_THE_SOFTWARE_OR_THE_USE_OR_OTHER_DEALINGS_IN_n
call fcn.1400010e4
lea rcx, str.___THE_SOFTWARE._n
call fcn.1400010e4
mov rcx, r12
call fcn.1400010e4
lea rcx, str.ZLIB_Data_Compression_Library:_Copyright__c__1995_2017_Jean_loup_Gailly_and_Mark_Adler_n
call fcn.1400010e4
lea rcx, str._______________________________http:__www.zlib.net__n
call fcn.1400010e4
mov rcx, r15
call fcn.1400010e4
lea rcx, str.___This_software_is_provided_as_is__without_any_express_or_implied_n
call fcn.1400010e4
lea rcx, str.___warranty.In_no_event_will_the_authors_be_held_liable_for_any_damages_n
call fcn.1400010e4
lea rcx, str.___arising_from_the_use_of_this_software._n
call fcn.1400010e4
lea r14, [0x14025a680]
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___Permission_is_granted_to_anyone_to_use_this_software_for_any_purpose__n
call fcn.1400010e4
lea rcx, str.___including_commercial_applications__and_to_alter_it_and_redistribute_it_n
call fcn.1400010e4
lea rcx, str.___freely__subject_to_the_following_restrictions_:_n
call fcn.1400010e4
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___1._The_origin_of_this_software_must_not_be_misrepresented__you_must_not_n
call fcn.1400010e4
lea rcx, str.______claim_that_you_wrote_the_original_software.If_you_use_this_software_n
call fcn.1400010e4
lea rcx, str.______in_a_product__an_acknowledgment_in_the_product_documentation_would_be_n
call fcn.1400010e4
lea rcx, str.______appreciated_but_is_not_required._n
call fcn.1400010e4
lea rcx, str.___2._Altered_source_versions_must_be_plainly_marked_as_such__and_must_not_be_n
call fcn.1400010e4
lea rcx, str.______misrepresented_as_being_the_original_software._n
call fcn.1400010e4
lea rcx, str.___3._This_notice_may_not_be_removed_or_altered_from_any_source_distribution._n
call fcn.1400010e4
mov rcx, r14
call fcn.1400010e4
lea rcx, str.___Jean___loup_Gailly________Mark_Adler_n
call fcn.1400010e4
lea rcx, str.___jloup_gzip.org____________madler_alumni.caltech.edu_n
call fcn.1400010e4
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b8e8c
mov rcx, rdi
call fcn.14009a5b0
xor eax, eax
jmp 0x1400ba83c
mov r13, rbx
mov qword [rsp + 0x58], rbx
mov r15d, ebx
mov dword [rsp + 0x60], ebx
cmp r14d, esi
jle 0x1400b8fdf
lea rdx, str._info
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b8fdf
lea r8, str.Feb_21_2022
lea rdx, str.22:53:33
lea rcx, str.Compiled_on:__s___s_n
call fcn.1400010e4
lea rdx, str.117444c751eb264f5ebc490db67419387810f6f3
lea rcx, str.___Commit_Hash:__s_n
call fcn.1400010e4
lea rdx, str.2022_Feb_17_02:11:00_0800
lea rcx, str.___Commit_Date:__s_n
call fcn.1400010e4
xor ecx, ecx
call fcn.1400d7b10
mov rdx, rax
lea rcx, str.Using__s_n
call fcn.1400010e4
mov edx, 4
lea rcx, str.Agent_ARCHID:__d_n
call fcn.1400010e4
lea rcx, [rsp + 0x600]
lea rax, str.var__tmp__Detected_OS:___require_os_.Name__try_tmp________require_os_.arch____catch_x_console.log__tmp__if_process.platformwin32___tmprequire_win_authenticode_opus__process.execPath___if__tmp_null___tmp.url_null___tmprequire_win_authenticode_opus_.locked__tmp.url___if__tmp_null___console.log_LOCKED_to:____tmp.dns___console.log_______tmp.id______process.exit___
mov edx, 0x80
lea r8d, [rdx - 0x7d]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, rdx
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, rdx
sub r8, 1
jne 0x1400b8f64
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
mov rax, qword [rax + 0x10]
mov qword [rcx + 0x10], rax
mov r15d, 0x197
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], r15d
cmp r14d, 2
jle 0x1400b90f8
lea rdx, str._faddr
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b906a
mov qword [rsp + 0x50], rbx
mov rcx, qword [rdi + 0x10]
add rcx, 2
lea r8, [rsp + 0x50]
lea rdx, str._016llx
call fcn.14000dc04
mov r8, qword [rsp + 0x50]
call fcn.14009bfa0
lea rdx, [0x1402ea800]
lea rcx, [0x14025831c]
call fcn.1400010e4
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b904b
jmp 0x1400b8ea6
cmp r14d, 2
jle 0x1400b90f8
lea rdx, str._fdelta
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b90f8
mov qword [rsp + 0x50], rbx
lea r8, [rsp + 0x50]
lea rdx, str._lld
mov rcx, qword [rdi + 0x10]
call fcn.14000dc04
lea r8, [0x14009ad98]
sub r8, qword [rsp + 0x50]
call fcn.14009bfa0
lea rdx, [0x1402ea800]
lea rcx, [0x14025831c]
call fcn.1400010e4
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b90d9
jmp 0x1400b8ea6
test r13, r13
je 0x1400b9102
test r15d, r15d
jne 0x1400b9170
mov r8d, 0x104
lea rdx, [rsp + 0x600]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x208
lea rax, [rsp + 0x810]
mov qword [rsp + 0x20], rax
mov r9d, r12d
lea r8, [rsp + 0x600]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x810]
call fcn.140089d20
mov r13, qword [rsp + 0x58]
mov r15d, dword [rsp + 0x60]
cmp r14d, 2
jle 0x1400b920f
lea rdx, str._exec
mov rcx, qword [rdi + 8]
call fcn.1401e0770
test eax, eax
jne 0x1400b91c0
test r15d, r15d
jne 0x1400b91c0
xor edx, edx
mov rcx, qword [rdi + 0x10]
call fcn.1400a2824
mov r13, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x1400b91b0
mov r15d, ebx
jmp 0x1400b91c0
mov edx, 0x1000
mov rcx, rax
call fcn.1401d5600
mov r15d, eax
cmp r14d, 2
jle 0x1400b920f
lea rdx, str._b64exec
mov rcx, qword [rdi + 8]
call fcn.1401e0770
test eax, eax
jne 0x1400b920f
test r15d, r15d
jne 0x1400b920f
mov rcx, qword [rdi + 0x10]
test rcx, rcx
jne 0x1400b91ed
mov rax, rbx
jmp 0x1400b91f7
mov edx, 0x10000
call fcn.1401d5600
lea r8, [rsp + 0x58]
mov edx, eax
mov rcx, qword [rdi + 0x10]
call fcn.1400a0c68
mov r15d, eax
mov r13, qword [rsp + 0x58]
cmp r14d, esi
jle 0x1400b9760
lea rdx, str._nodeid
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b929b
movups xmm0, xmmword [str.console.log_require__agentNodeId_____process.exit___]
movups xmmword [rsp + 0x600], xmm0
movups xmm1, xmmword [0x1402bd778]
movups xmmword [rsp + 0x610], xmm1
movups xmm0, xmmword [0x1402bd788]
movups xmmword [rsp + 0x620], xmm0
mov eax, dword [0x1402bd798]
mov dword [rsp + 0x630], eax
movzx eax, word [0x1402bd79c]
mov word [rsp + 0x634], ax
mov al, byte [0x1402bd79e]
mov byte [rsp + 0x636], al
mov r15d, gethostname
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str._name
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9329
movaps xmm0, xmmword [str.console.log_require__agentNodeId_.serviceName____process.exit___]
movaps xmmword [rsp + 0x600], xmm0
movaps xmm1, xmmword [0x1402bd7c0]
movaps xmmword [rsp + 0x610], xmm1
movaps xmm0, xmmword [0x1402bd7d0]
movaps xmmword [rsp + 0x620], xmm0
movaps xmm1, xmmword [0x1402bd7e0]
movaps xmmword [rsp + 0x630], xmm1
movzx eax, word [0x1402bd7f0]
mov word [rsp + 0x640], ax
mov al, byte [0x1402bd7f2]
mov byte [rsp + 0x642], al
mov r15d, 0x42
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str.state
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b93de
lea rdx, [rsp + 0x600]
lea rax, [0x140000000]
lea rcx, [rax + 0x2bd800]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
mov eax, 0x80
add rdx, rax
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
add rcx, rax
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov rax, qword [rcx + 0x20]
mov qword [rdx + 0x20], rax
mov eax, dword [rcx + 0x28]
mov dword [rdx + 0x28], eax
mov r15d, 0xab
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str.start
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b9413
lea rdx, str._start
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b94af
lea rcx, [rsp + 0x600]
lea rax, [0x140000000]
lea rax, [rax + 0x2bd8c0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov edx, 0x80
add rcx, rdx
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, rdx
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movzx eax, word [rax + 0x40]
mov word [rcx + 0x40], ax
lea r15d, [rdx + 0x41]
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str.stop
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b94e4
lea rdx, str._stop
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9565
lea rax, [rsp + 0x600]
lea rcx, str.tryrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.stop__.then_function_m_console.log_Service_Stopped__process.exit_____function_m_console.log_m__process.exit_____catch_z_console.log_Failed_to_stop_service__process.exit___
mov edx, 0x80
lea r8d, [rdx - 0x7e]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, rdx
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, rdx
sub r8, 1
jne 0x1400b94fc
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
mov r15d, 0x10f
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str.restart
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400b959a
lea rdx, str._restart
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9623
lea rcx, [rsp + 0x600]
lea rax, str.tryrequire_service_manager_.manager.getService_require__agentNodeId_.serviceName___.restart__.then_function_m_console.log_Service_Restarted__process.exit_____function_m_console.log_m__process.exit_____catch_z_console.log_Failed_to_restart_service__process.exit___
mov edx, 0x80
lea r8d, [rdx - 0x7e]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, rdx
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, rdx
sub r8, 1
jne 0x1400b95b2
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
mov rax, qword [rax + 0x10]
mov qword [rcx + 0x10], rax
mov r15d, 0x117
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str._agentHash
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b96cd
test r15d, r15d
jne 0x1400b96cd
movaps xmm0, xmmword [str.console.log_getSHA384FileHash_process.execPath_.toString_hex_.substring_0_16___process.exit___]
movaps xmmword [rsp + 0x600], xmm0
movaps xmm1, xmmword [0x1402bdc10]
movaps xmmword [rsp + 0x610], xmm1
movaps xmm0, xmmword [0x1402bdc20]
movaps xmmword [rsp + 0x620], xmm0
movaps xmm1, xmmword [0x1402bdc30]
movaps xmmword [rsp + 0x630], xmm1
movaps xmm0, xmmword [0x1402bdc40]
movaps xmmword [rsp + 0x640], xmm0
movaps xmm1, xmmword [0x1402bdc50]
movaps xmmword [rsp + 0x650], xmm1
mov al, byte [0x1402bdc60]
mov byte [rsp + 0x660], al
mov r15d, 0x60
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
cmp r14d, esi
jle 0x1400b9760
lea rdx, str._agentFullHash
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9760
test r15d, r15d
jne 0x1400b9760
movaps xmm0, xmmword [str.console.log_getSHA384FileHash_process.execPath_.toString_hex___process.exit___]
movaps xmmword [rsp + 0x600], xmm0
movaps xmm1, xmmword [0x1402bdc90]
movaps xmmword [rsp + 0x610], xmm1
movaps xmm0, xmmword [0x1402bdca0]
movaps xmmword [rsp + 0x620], xmm0
movaps xmm1, xmmword [0x1402bdcb0]
movaps xmmword [rsp + 0x630], xmm1
movaps xmm0, xmmword [0x1402bdcc0]
movaps xmmword [rsp + 0x640], xmm0
mov al, byte [0x1402bdcd0]
mov byte [rsp + 0x650], al
mov r15d, 0x50
mov edx, r15d
lea rcx, [rsp + 0x600]
call fcn.1400a2824
mov r13, rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
cmp r14d, esi
jle 0x1400b9a63
lea rdx, str._updaterversion
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b97e4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x58]
mov r8d, 2
lea rdx, [0x1402bdce8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b97c5
jmp 0x1400b8ea6
cmp r14d, esi
jle 0x1400b9a63
lea rdx, str._kvm0
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9921
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rax + 0x20]
call fcn.14009a7ac
mov r12, rax
lea rax, [0x1400b8904]
mov qword [r12], rax
mov dword [r12 + 0x10], ebx
cmp r14d, 2
jle 0x1400b9844
lea rdx, str._coredump
mov rcx, qword [rdi + 0x10]
call fcn.1401d473c
test eax, eax
mov eax, esi
je 0x1400b9846
mov eax, ebx
mov dword [r12 + 0x18], eax
cmp r14d, 2
jle 0x1400b9865
lea rdx, str._remotecursor
mov rcx, qword [rdi + 0x10]
call fcn.1401d473c
test eax, eax
je 0x1400b987f
cmp r14d, 3
jle 0x1400b9885
lea rdx, str._remotecursor
mov rcx, qword [rdi + 0x18]
call fcn.1401d473c
test eax, eax
jne 0x1400b9885
mov dword [0x1402e5ef0], esi
xor edx, edx
mov r8d, 0x800
lea rcx, str.Shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov r15, rbx
test rax, rax
je 0x1400b98c9
lea rdx, str.SetProcessDpiAwareness
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
jne 0x1400b98c9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14, rbx
test r15, r15
je 0x1400b98e1
mov ecx, 2
call r15
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400b98e7
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov rcx, r12
call fcn.14000f990
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b9902
jmp 0x1400b8ea6
cmp r14d, esi
jle 0x1400b9a63
lea rdx, str._kvm1
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9a63
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rax + 0x20]
call fcn.14009a7ac
mov r12, rax
lea rax, [0x1400b8904]
mov qword [r12], rax
mov dword [r12 + 0x10], esi
cmp r14d, 2
jle 0x1400b9981
lea rdx, str._coredump
mov rcx, qword [rdi + 0x10]
call fcn.1401d473c
test eax, eax
mov eax, esi
je 0x1400b9983
mov eax, ebx
mov dword [r12 + 0x18], eax
cmp r14d, 2
jle 0x1400b99a2
lea rdx, str._remotecursor
mov rcx, qword [rdi + 0x10]
call fcn.1401d473c
test eax, eax
je 0x1400b99bc
cmp r14d, 3
jle 0x1400b99c2
lea rdx, str._remotecursor
mov rcx, qword [rdi + 0x18]
call fcn.1401d473c
test eax, eax
jne 0x1400b99c2
mov dword [0x1402e5ef0], esi
xor edx, edx
mov r8d, 0x800
lea rcx, str.Shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov r15, rbx
test rax, rax
je 0x1400b9a06
lea rdx, str.SetProcessDpiAwareness
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
test rax, rax
jne 0x1400b9a06
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r14, rbx
test r15, r15
je 0x1400b9a1e
mov ecx, 2
call r15
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x1400b9a24
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov rcx, r12
call fcn.14000f990
mov r15d, ebx
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400ba822
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add r15d, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp r15d, eax
jl 0x1400b9a42
jmp 0x1400ba822
test r13, r13
jne 0x1400ba73a
test r14d, r14d
jle 0x1400b9a88
lea rdx, str.__slave
mov rcx, qword [rdi]
call fcn.1401d473c
test eax, eax
je 0x1400ba73a
cmp r14d, esi
jle 0x1400b9d29
lea rdx, [0x14025af10]
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400ba73a
lea rdx, str.connect
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400ba73a
lea rdx, str.__slave
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400ba73a
cmp r14d, esi
jle 0x1400b9d29
mov rax, qword [rdi + 8]
mov rcx, qword [rax]
cmp rcx, qword [str._update:]
jne 0x1400b9c36
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r12d, 0x400
mov ecx, r12d
call fcn.14009a7ac
mov r15, rax
mov rcx, qword [rdi + 8]
cmp byte [rcx + 8], 0x2a
jne 0x1400b9b5b
cmp r14d, 2
jle 0x1400b9b25
mov rax, qword [rdi + 0x10]
jmp 0x1400b9b2c
lea rax, str.null
lea r8, str.true
lea r9, str.false
cmp byte [rcx + 9], 0x53
cmove r9, r8
mov qword [rsp + 0x20], rax
lea r8, str.require_agent_installer_.update__s___s__
mov rdx, r12
mov rcx, r15
call fcn.140001138
jmp 0x1400b9bb3
cmp r14d, 2
jle 0x1400b9ba1
lea rdx, [0x14025af10]
mov rcx, qword [rdi + 0x10]
call fcn.1401e0770
test eax, eax
je 0x1400b9b89
lea rdx, str.connect
mov rcx, qword [rdi + 0x10]
call fcn.1401e0770
test eax, eax
jne 0x1400b9ba1
mov r9, qword [rdi + 0x10]
lea r8, str.require_agent_installer_.update_false____s___
mov rdx, r12
mov rcx, r15
call fcn.140001138
jmp 0x1400b9bb3
lea r8, str.require_agent_installer_.update_true__
mov rdx, r12
mov rcx, r15
call fcn.140001138
mov r12d, eax
xor ecx, ecx
call fcn.1400088a4
mov qword [0x1402e6280], rax
mov qword [rax + 0x20], r15
mov dword [rax + 0x28], r12d
mov r8, rdi
mov edx, r14d
call fcn.14000c7e8
mov rax, qword [0x1402e6280]
mov r15d, dword [rax + 0xdb4]
mov dword [rsp + 0x74], r15d
call fcn.14000cef4
mov qword [0x1402e6280], rbx
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400ba81f
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400b9c09
jmp 0x1400ba81f
cmp r14d, esi
jle 0x1400b9d29
lea rdx, str._netinfo
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9c74
lea rcx, [rsp + 0x78]
call fcn.1400116a0
test eax, eax
jle 0x1400ba702
mov rcx, qword [rsp + 0x78]
call fcn.1400b8204
jmp 0x1400ba702
cmp r14d, esi
jle 0x1400b9d29
lea rdx, str._setfirewall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9cd8
mov r8d, 0x104
lea rdx, [rsp + 0xa20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.1400b84f0
test eax, eax
jne 0x1400b9cbc
lea rcx, str.Must_run_as_administrator
jmp 0x1400ba156
lea rcx, [rsp + 0xa20]
call fcn.1400b7f80
lea rcx, [rsp + 0xa20]
call fcn.1400b7af4
jmp 0x1400b9d1d
cmp r14d, esi
jle 0x1400b9d29
lea rdx, str._clearfirewall
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9d29
mov r8d, 0x104
lea rdx, [rsp + 0xa20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.1400b84f0
test eax, eax
je 0x1400b9cb0
lea rcx, [rsp + 0xa20]
call fcn.1400b7f80
lea rcx, str.Done
jmp 0x1400ba156
cmp r14d, 2
jne 0x1400b9e05
lea rdx, str._resetnodeid
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400b9e05
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
lea rdx, [0x14025aa18]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400b9dc2
mov dword [rsp + 0x6c], esi
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 2]
xor r8d, r8d
lea rdx, str.ResetNodeId
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400b9db5
lea rcx, str.NodeID_will_be_reset_next_time_the_Mesh_Agent_service_is_started.
call fcn.1400010e4
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400b9dce
lea rcx, str.Error_writing_to_registry__try_running_as_administrator.
call fcn.1400010e4
mov r15d, ebx
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400ba822
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add r15d, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp r15d, eax
jl 0x1400b9de4
jmp 0x1400ba822
mov r13d, ebx
lea rax, str.Mesh_Agent_background_service
mov qword [rsp + 0x600], rax
lea rax, [0x1400b86e4]
mov qword [rsp + 0x608], rax
mov qword [rsp + 0x610], rbx
mov qword [rsp + 0x618], rbx
mov dword [0x1402e6540], r14d
mov qword [0x1402e6530], rdi
lea rcx, [rsp + 0x600]
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherA]
test eax, eax
jne 0x1400ba702
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x427
jne 0x1400ba702
cmp r14d, 2
jl 0x1400ba006
mov dword [rsp + 0x20], esi
mov r9d, 3
lea r8, [0x14025b274]
mov rdx, r12
mov rcx, qword [rdi + 8]
call fcn.1400a2468
test eax, eax
jne 0x1400b9eb5
mov dword [rsp + 0x20], esi
lea r9d, [rax + 4]
lea r8, str..zip
mov rdx, r12
mov rcx, qword [rdi + 8]
call fcn.1400a2468
test eax, eax
je 0x1400b9f03
mov edx, esi
lea rcx, [0x1400b8948]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
xor ecx, ecx
call fcn.1400088a4
mov qword [0x1402e6280], rax
mov dword [rax + 0xdf8], esi
mov r8, rdi
mov edx, r14d
call fcn.14000c7e8
call fcn.14000cef4
mov qword [0x1402e6280], rbx
jmp 0x1400ba702
cmp r14d, 2
jne 0x1400ba006
lea rdx, [0x1402bdea4]
mov rcx, qword [rdi + 8]
call fcn.1401e0770
test eax, eax
jne 0x1400ba006
mov r15d, 0x104
mov r8d, r15d
lea rdx, [rsp + 0x810]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r9d, r15d
lea r8, [rsp + 0x600]
mov edx, r12d
lea rcx, [rsp + 0x810]
call fcn.140099d90
xor ecx, ecx
call fcn.14009ac00
mov r14, rax
mov rcx, rax
call fcn.14009db84
call fcn.14008c7f0
mov rcx, rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x600]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9, r14
xor r8d, r8d
xor edx, edx
call fcn.14008d390
mov r13, rax
mov r9d, 0xe88
lea rdx, str.require_util_language_.current.toUpperCase__.split___.join____
mov rcx, rax
call fcn.14001a86c
test eax, eax
jne 0x1400b9fdf
xor r8d, r8d
mov edx, r12d
mov rcx, r13
call fcn.14001cf10
mov rdx, rax
lea rcx, str.Current_Language:__s_n
call fcn.1400010e4
mov rcx, r13
call fcn.14006799c
mov dword [r14], 2
mov rcx, r14
call fcn.14009ae24
mov rcx, r14
call fcn.14009dc38
mov r14d, esi
mov r13d, esi
jmp 0x1400ba00c
mov r15d, 0x104
cmp r14d, 2
jne 0x1400ba06e
mov rcx, qword [rdi + 8]
mov rax, r12
inc rax
cmp byte [rcx + rax], bl
jne 0x1400ba019
mov r8d, 6
cmp rax, r8
jbe 0x1400ba06e
lea rdx, str._lang
call fcn.1401d3bd0
test eax, eax
jne 0x1400ba06e
mov rcx, qword [rdi + 8]
mov rdx, r12
inc rdx
cmp byte [rcx + rdx], bl
jne 0x1400ba043
mov r9, rsi
lea r8, [0x14025a684]
call fcn.1400a252c
movsxd rcx, eax
inc rcx
add rcx, qword [rdi + 8]
mov qword [0x1402e62b8], rcx
mov r14d, esi
cmp r14d, esi
je 0x1400ba160
lea rcx, str.Mesh_Agent_available_switches:_r_n
call fcn.1400010e4
lea rcx, str.__run_______________Start_as_a_console_agent._r_n
call fcn.1400010e4
lea rcx, str.__connect___________Start_as_a_temporary_console_agent._r_n
call fcn.1400010e4
lea rcx, str.__start_____________Start_the_service._r_n
call fcn.1400010e4
lea rcx, str.__restart___________Restart_the_service._r_n
call fcn.1400010e4
lea rcx, str.__stop______________Stop_the_service._r_n
call fcn.1400010e4
lea rcx, str.__state_____________Display_the_running_state_of_the_service._r_n
call fcn.1400010e4
lea rcx, str.___signcheck________Perform_self___check._r_n
call fcn.1400010e4
lea rcx, str.___install__________Install_the_service_from_this_location._r_n
call fcn.1400010e4
lea rcx, str.___uninstall________Remove_the_service_from_this_location._r_n
call fcn.1400010e4
lea rcx, str.___nodeid_t_t_tReturn_the_current_agent_identifier._r_n
call fcn.1400010e4
lea rcx, str.___resetnodeid______Reset_the_NodeID_next_time_the_service_is_started._r_n
call fcn.1400010e4
lea rcx, str.___fulluninstall____Stop_agent_and_clean_up_the_program_files_location._r_n
call fcn.1400010e4
lea rcx, str.___fullinstall______Copy_agent_into_program_files__install_and_launch._r_n
call fcn.1400010e4
lea rcx, [0x14026808c]
call fcn.1400010e4
lea rcx, str.____________________The_following_switches_can_be_specified_after__fullinstall:_r_n
call fcn.1400010e4
lea rcx, [0x14026808c]
call fcn.1400010e4
lea rcx, str._______WebProxy_http:__proxyhost:port_______Specify_an_HTTPS_proxy._r_n
call fcn.1400010e4
lea rcx, str._______agentName_alternate_name_____________Specify_an_alternate_name_to_be_provided_by_the_agent._r_n
call fcn.1400010e4
jmp 0x1400ba702
test r13d, r13d
jne 0x1400ba702
mov r13, rbx
mov r8d, r15d
lea rdx, [rsp + 0x810]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r9d, r15d
lea r8, [rsp + 0x600]
mov edx, r12d
lea rcx, [rsp + 0x810]
call fcn.140099d90
xor ecx, ecx
call fcn.14009ac00
mov r15, rax
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.14009db84
call fcn.14008c7f0
mov rcx, rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x600]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9, r15
xor r8d, r8d
xor edx, edx
call fcn.14008d390
mov r14, rax
mov r9d, 0xe88
lea rdx, str.require_win_authenticode_opus_.checkMSH___
mov rcx, rax
call fcn.14001a86c
mov rcx, r14
test eax, eax
jne 0x1400ba6c2
mov r15d, 0xe88
mov r9d, r15d
lea rdx, str.require_util_language_.current.toLowerCase__.split___.join____
call fcn.14001a86c
test eax, eax
jne 0x1400ba239
xor r8d, r8d
mov edx, r12d
mov rcx, r14
call fcn.14001cf10
mov r13, rax
mov r9d, r15d
lea rdx, str._function_foo__return_JSON.parse__MSH__.translation______
mov rcx, r14
call fcn.14001a86c
test eax, eax
jne 0x1400ba270
lea r8, [0x1402be434]
mov edx, r12d
mov rcx, r14
call fcn.14001b47c
test eax, eax
je 0x1400ba270
mov r15d, 0xfffffffe
jmp 0x1400ba457
mov rcx, r14
call fcn.14001e160
lea rdx, str.Install
mov rcx, r14
call fcn.14001dc80
lea r8, str.install
mov r15d, 0xfffffffe
mov edx, r15d
mov rcx, r14
call fcn.14001b214
lea rdx, [0x1402be448]
mov rcx, r14
call fcn.14001dc80
lea r8, str.uninstall
mov edx, r15d
mov rcx, r14
call fcn.14001b214
lea rdx, str.Connect
mov rcx, r14
call fcn.14001dc80
lea r8, str.connect
mov edx, r15d
mov rcx, r14
call fcn.14001b214
lea rdx, str.Disconnect
mov rcx, r14
call fcn.14001dc80
lea r8, str.disconnect
mov edx, r15d
mov rcx, r14
call fcn.14001b214
lea rdx, str.Update
mov rcx, r14
call fcn.14001dc80
lea r8, str.update
mov edx, r15d
mov rcx, r14
call fcn.14001b214
mov rcx, r14
call fcn.14001e190
lea rdx, str.NOT_INSTALLED
mov rcx, r14
call fcn.14001dc80
mov edx, r15d
mov rcx, r14
call fcn.14001c0d8
lea r8, str.push
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8d, r12d
mov edx, r15d
mov rcx, r14
call fcn.14001c090
lea edx, [r15 - 1]
mov rcx, r14
call fcn.14001c0d8
mov edx, esi
mov rcx, r14
call fcn.140019d68
mov rcx, r14
call fcn.14001ebd0
lea rdx, str.RUNNING
mov rcx, r14
call fcn.14001dc80
mov edx, r15d
mov rcx, r14
call fcn.14001c0d8
lea r8, str.push
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8d, r12d
mov edx, r15d
mov rcx, r14
call fcn.14001c090
lea edx, [r15 - 1]
mov rcx, r14
call fcn.14001c0d8
mov edx, esi
mov rcx, r14
call fcn.140019d68
mov rcx, r14
call fcn.14001ebd0
lea rdx, str.NOT_RUNNING
mov rcx, r14
call fcn.14001dc80
mov edx, r15d
mov rcx, r14
call fcn.14001c0d8
lea r8, str.push
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8d, r12d
mov edx, r15d
mov rcx, r14
call fcn.14001c090
lea edx, [r15 - 1]
mov rcx, r14
call fcn.14001c0d8
mov edx, esi
mov rcx, r14
call fcn.140019d68
mov rcx, r14
call fcn.14001ebd0
lea r8, str.status
mov edx, r15d
mov rcx, r14
call fcn.14001b214
lea r8, [0x1402be434]
mov edx, r15d
mov rcx, r14
call fcn.14001b214
mov rax, qword [0x1402e62b8]
test rax, rax
cmovne r13, rax
mov r8, r13
mov edx, r12d
mov rcx, r14
call fcn.14001b47c
test eax, eax
jne 0x1400ba541
mov rdx, r13
mov rcx, r14
call fcn.14001dc80
mov edx, r12d
mov rcx, r14
call fcn.14001c0d8
lea r8, str.split
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8d, r12d
mov edx, r15d
mov rcx, r14
call fcn.14001c090
lea rdx, [0x1402bb9d0]
mov rcx, r14
call fcn.14001dc80
mov r8d, 2
mov edx, esi
mov rcx, r14
call fcn.140019be8
xor r8d, r8d
mov edx, eax
mov rcx, r14
call fcn.14003a48c
mov edx, r12d
mov rcx, r14
call fcn.14001c0d8
lea r8, str.shift
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8d, r12d
mov edx, r15d
mov rcx, r14
call fcn.14001c090
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, r14
call fcn.140019be8
xor r8d, r8d
mov edx, eax
mov rcx, r14
call fcn.14003a48c
xor r8d, r8d
mov edx, r12d
mov rcx, r14
call fcn.14001cf10
mov r13, rax
mov edx, 0xfffffffc
mov rcx, r14
call fcn.14001c0d8
mov r8, r13
mov edx, r12d
mov rcx, r14
call fcn.14001b47c
lea r15, [0x1402be434]
test eax, eax
cmovne r15, r13
mov al, byte [0x1402be434]
cmp al, byte [r15]
jne 0x1400ba583
mov al, byte [0x1402be435]
cmp al, byte [r15 + 1]
jne 0x1400ba583
mov al, byte [0x1402be436]
cmp al, byte [r15 + 2]
je 0x1400ba61e
lea r8, [0x1402be434]
mov edx, r12d
mov rcx, r14
call fcn.14001afb0
mov r8, r15
mov r13d, 0xfffffffe
mov edx, r13d
mov rcx, r14
call fcn.14001afb0
lea r8d, [r13 + 0x12]
mov edx, r13d
mov rcx, r14
call fcn.14001b8bc
jmp 0x1400ba601
mov edx, r13d
call fcn.14001bc70
cmp dword [rax], 8
mov rcx, rbx
jne 0x1400ba5ce
mov rcx, qword [rax + 8]
lea rax, [rcx + 0x20]
neg rcx
sbb r8, r8
and r8, rax
mov edx, 0xfffffffc
mov rcx, r14
call fcn.14001b47c
mov rcx, r14
test eax, eax
jne 0x1400ba5fc
mov r8d, r13d
lea edx, [rax - 4]
call fcn.14001b18c
jmp 0x1400ba601
call fcn.14001ebd0
mov r8d, esi
mov edx, r12d
mov rcx, r14
call fcn.14001b8f8
mov rcx, r14
test eax, eax
jne 0x1400ba5ba
lea edx, [rax + 3]
call fcn.14001ea14
mov edx, r12d
mov rcx, r14
call fcn.14001bc70
test byte [rax], 8
jne 0x1400ba633
mov rax, rbx
jmp 0x1400ba637
mov rax, qword [rax + 8]
mov qword [0x1402e6278], rax
mov qword [0x1402e62a8], r14
mov qword [0x1402e6288], r15
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.1400b8258
mov qword [rsp + 0x20], rbx
lea r9, [0x1400baca0]
xor r8d, r8d
lea edx, [r8 + 0x67]
xor ecx, ecx
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov rcx, qword [0x1402e62b0]
test rcx, rcx
je 0x1400ba68e
mov rax, qword [0x1402e6598]
call rax
mov qword [0x1402e62b0], rbx
mov rcx, qword [0x1402e62a0]
test rcx, rcx
je 0x1400ba6a7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1402e62a0], rbx
mov rcx, qword [0x1402e6290]
test rcx, rcx
je 0x1400ba6de
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1402e6290], rbx
jmp 0x1400ba6de
xor r8d, r8d
mov edx, r12d
call fcn.14001cf10
mov rdx, rax
lea rcx, str.Error:__s
call fcn.1400010e4
jmp 0x1400ba6e3
mov r15, qword [rsp + 0x50]
mov rcx, r14
call fcn.14006799c
mov dword [r15], 2
mov rcx, r15
call fcn.14009ae24
mov rcx, r15
call fcn.14009dc38
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400b8ea6
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400ba71b
jmp 0x1400b8ea6
mov edx, esi
lea rcx, [0x1400b8948]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
nop
mov r12d, ebx
mov dword [rsp + 0x70], ebx
cmp r14d, esi
jle 0x1400ba776
lea rdx, str.connect
mov rcx, qword [rdi + 8]
call fcn.1401d473c
mov ecx, 0x20
test eax, eax
cmove r12d, ecx
mov dword [rsp + 0x70], r12d
mov ecx, r12d
call fcn.1400088a4
mov qword [0x1402e6280], rax
mov qword [rax + 0x20], r13
mov dword [rax + 0x28], r15d
test r13, r13
jne 0x1400ba7c6
cmp r14d, esi
jle 0x1400ba7cc
lea rdx, [0x14025af10]
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
je 0x1400ba7bf
lea rdx, str.connect
mov rcx, qword [rdi + 8]
call fcn.1401d473c
test eax, eax
jne 0x1400ba7cc
mov rax, qword [0x1402e6280]
mov dword [rax + 0xdf8], esi
mov r8, rdi
mov edx, r14d
call fcn.14000c7e8
mov rax, qword [0x1402e6280]
mov r15d, dword [rax + 0xdb4]
mov dword [rsp + 0x74], r15d
call fcn.14000cef4
mov qword [0x1402e6280], rbx
mov rax, qword [rdi - 0x18]
shr rax, 3
test eax, eax
jle 0x1400ba81f
mov r14, rdi
mov rcx, qword [r14]
call fcn.14009a5b0
add ebx, esi
lea r14, [r14 + 8]
mov rax, qword [rdi - 0x18]
shr rax, 3
cmp ebx, eax
jl 0x1400ba805
mov ebx, r15d
mov rcx, rdi
call fcn.14009a5b0
mov eax, ebx
jmp 0x1400ba83c
mov rcx, qword [rsp + 0xc30]
xor rcx, rsp
call fcn.1401cbe50
lea r11, [rsp + 0xc40]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret