Function at 0x140005c48
Capabilities:
Delete registry value
Query or enumerate registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x1a8], rbx
mov qword [rbp + 0x1b0], rsi
mov qword [rbp + 0x1b8], rdi
mov rax, qword [0x14021c510]
xor rax, rbp
mov qword [rbp + 0x160], rax
xor r13d, r13d
mov qword [rbp + 0x48], r8
mov eax, r9d
mov r12d, edx
mov rbx, rcx
mov dword [rbp + 0x20], eax
mov r15d, r13d
mov dword [rbp + 8], edx
cmp qword [rcx + 0x48], r13
jne 0x140005cc6
mov rcx, qword [rcx + 0x38]
lea rdx, [0x1401e2c38]
call fcn.140002618
mov rcx, rax
call fcn.14007b6ec
mov r8, qword [rbp + 0x48]
mov qword [rbx + 0x48], rax
mov eax, dword [rbp + 0x20]
cmp qword [rbx + 0x48], r13
jne 0x140005d4b
mov qword [0x140220180], rbx
mov dword [0x140220188], r12d
mov qword [0x140220190], r8
mov dword [0x140220198], eax
mov edx, dword [rbx + 0x758]
cmp edx, 0xa
je 0x140005d38
inc edx
lea rcx, str.Unable_to_open_database___d_10_..._r_n
call fcn.140001090
mov rcx, qword [rbx]
lea r9, [0x140005adc]
mov edi, 1
mov qword [rsp + 0x20], r13
add dword [rbx + 0x758], edi
lea rdx, [0x140220180]
mov r8d, 0x7d0
mov rcx, qword [rcx + 0x4f8]
call fcn.140076ebc
jmp 0x140006ab1
lea rcx, str.Unable_to_open_database._r_n
call fcn.140001090
xor eax, eax
jmp 0x140006ab3
mov rdx, qword [rbx]
call fcn.14007e7a8
mov qword [rbx + 0x40], rax
lea rdx, [0x1401e2c88]
lea rax, [rbp + 0x18]
mov dword [rbp], r13d
mov r9d, 0xf003f
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, 1
test eax, eax
jne 0x140005dda
mov rcx, qword [rbp + 0x18]
lea rax, [rbp]
mov qword [rsp + 0x28], rax
lea rdx, str.ResetNodeId
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140005dd0
cmp dword [rbp], r13d
jbe 0x140005dd0
mov rcx, qword [rbp + 0x18]
lea rdx, str.ResetNodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
cmove r15d, edi
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.140067b9c
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x38]
xor r8d, r8d
mov qword [rsp + 0x48], r13
xor edx, edx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
call fcn.140067c24
mov r9d, 0xe88
mov qword [rbp + 0x10], rax
lea rdx, str._function__getMac____var_ret____var_ni__require_os_.networkInterfaces____for__var_f_in_ni___for__var_i_in_ni_f____if_ni_f__i_.type__ethernet__ni_f__i_.type__wireless__ret______ni_f__i_.mac________return_ret_______
mov rcx, rax
mov r13, rax
call fcn.14000dbf8
test eax, eax
jne 0x140005fd1
lea r8, [rbp]
or edx, 0xffffffff
mov rcx, r13
call fcn.14000f5c4
mov rsi, qword [rbp]
mov r14, rax
mov qword [rbp + 0x18], rax
cmp rsi, 0x13
jb 0x140005fd1
mov edx, 0x400
lea rcx, str.LocalMacAddresses
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
and dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, eax
call fcn.14007b934
movsxd r12, eax
test eax, eax
jne 0x140005e94
mov r9, r14
jmp 0x140005fb3
xor r14d, r14d
test esi, esi
jle 0x140005fcd
mov r13, qword [rbp + 0x18]
movsxd rcx, r14d
lea rdx, str._00:00:00:00:00:00_
add rcx, r13
mov r8d, reloc.WS2_32.dll_send
call fcn.14016ed10
test eax, eax
jne 0x140005ec8
add r14d, 0x13
cmp r14d, esi
jl 0x140005ea3
mov r13, qword [rbp + 0x10]
cmp r14d, esi
jge 0x140005fcd
lea rax, [r12 + 0x38]
xor r14d, r14d
lea rcx, [rax + 0xf]
mov rdx, r12
cmp rcx, rax
ja 0x140005ef3
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.140168660
sub rsp, rcx
mov r9d, edi
mov r8d, 8
lea rcx, [rsp + 0x50]
call fcn.140073060
mov edx, 0x400
mov qword [rbp], rax
lea rcx, [rax + 8]
mov qword [rax], rcx
lea rcx, str.LocalMacAddresses
call fcn.14017015c
mov r9, qword [rbp]
lea rdx, str.LocalMacAddresses
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov dword [rsp + 0x20], r12d
call fcn.14007b934
test r12d, r12d
jle 0x140005fac
mov r13, qword [rbp + 0x18]
mov rdi, qword [rbp]
movsxd rax, r14d
lea rdx, str._00:00:00:00:00:00_
add rax, rdi
mov r8d, reloc.WS2_32.dll_send
mov rcx, rax
mov qword [rbp], rax
call fcn.14016ed10
test eax, eax
je 0x140005f95
mov r8, qword [rbp]
mov r9d, reloc.WS2_32.dll_send
mov edx, esi
mov rcx, r13
call fcn.140078220
test eax, eax
jns 0x140005f9e
add r14d, 0x13
cmp r14d, r12d
jl 0x140005f5a
mov r13, qword [rbp + 0x10]
mov edi, 1
cmp r14d, r12d
jl 0x140005fcd
mov r9, qword [rbp + 0x18]
mov r15d, edi
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
mov r8d, reloc.WS2_32.dll_recvfrom
mov dword [rsp + 0x20], esi
call fcn.14007b7c0
mov r12d, dword [rbp + 8]
test r13, r13
je 0x140005fdf
mov rcx, qword [r13 + 0x40]
call fcn.1400228e4
cmp r15d, edi
je 0x140005ff5
mov rcx, rbx
call fcn.140002a08
xor r13d, r13d
test eax, eax
je 0x140006010
jmp 0x140005ff8
xor r13d, r13d
mov rcx, rbx
call fcn.1400027ac
test eax, eax
je 0x140006010
lea rcx, str.Certificate_error_r_n
call fcn.140001090
mov rcx, rbx
call fcn.140002cc0
test eax, eax
je 0x140006028
lea rcx, str.Certificate_validation_error_r_n
call fcn.140001090
mov rcx, qword [rbx + 0x38]
lea rdx, str..tag
mov qword [rbp + 0x10], r13
call fcn.140002618
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.1400717ac
mov rsi, qword [rbp + 0x10]
lea r14, [0x1401e231c]
mov rcx, qword [rbx + 0x48]
mov r8d, 3
mov rdx, r14
test rsi, rsi
je 0x14000607b
mov r9, rsi
mov dword [rsp + 0x20], eax
call fcn.14007b7c0
mov rcx, rsi
call fcn.14016f3a8
jmp 0x140006080
call fcn.14007ba6c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x60]
mov r8d, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x20], 0xff
lea rdx, str.ignoreProxyFile
call fcn.14007b934
test eax, eax
jne 0x1400060fb
mov rcx, qword [rbx + 0x38]
lea rdx, str..proxy
mov qword [rbp + 0x10], r13
call fcn.140002618
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.1400717ac
mov rsi, qword [rbp + 0x10]
lea rdx, str.WebProxy
mov rcx, qword [rbx + 0x48]
mov r8d, 8
test rsi, rsi
je 0x1400060f6
mov r9, rsi
mov dword [rsp + 0x20], eax
call fcn.14007b7c0
mov rcx, rsi
call fcn.14016f3a8
jmp 0x1400060fb
call fcn.14007ba6c
mov rcx, qword [rbx + 0x38]
lea rdx, str..mshx
call fcn.140002618
mov rdx, rax
mov rcx, rbx
call fcn.140005684
test eax, eax
jne 0x140006182
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002618
mov rdx, rax
mov rcx, rbx
call fcn.140005684
test eax, eax
jne 0x140006182
lea rdx, str.mesh_linumshx
mov rcx, rbx
call fcn.140005684
test eax, eax
jne 0x140006182
lea rdx, str.mesh_limshx
mov rcx, rbx
call fcn.140005684
test eax, eax
jne 0x140006182
mov rcx, rbx
call fcn.1400054c8
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002618
mov rdx, rax
mov rcx, rbx
call fcn.140005684
mov r15d, 0x400
mov dword [rbp], r13d
lea rsi, str.AgentCapabilities
mov edx, r15d
mov rcx, rsi
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rsi
call fcn.14007b934
cmp eax, 4
jne 0x1400061ec
mov edx, r15d
mov rcx, rsi
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp]
mov r8d, eax
mov dword [rsp + 0x20], 4
mov rdx, rsi
call fcn.14007b934
mov ecx, dword [rbp]
call qword [sym.imp.WS2_32.dll_ntohl]
or dword [rbx + 0x68], eax
lea r8, [rbp]
mov rcx, 0xffffffff80000002
lea rdx, [0x1401e2c88]
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea r15, [0x140220180]
test eax, eax
jne 0x14000658b
lea rcx, [rbx + 0x700]
mov qword [rbp + 8], r13
lea r8, [rbp + 8]
lea edx, [rax + 0x30]
call fcn.140076bb0
movsxd rdx, eax
test eax, eax
jle 0x14000628c
mov rsi, qword [rbp + 8]
test rsi, rsi
je 0x14000628c
mov rcx, rdx
test eax, eax
jle 0x14000625e
mov rax, rsi
cmp byte [rax], 0x2b
jne 0x14000624e
mov byte [rax], 0x40
jmp 0x140006256
cmp byte [rax], 0x2f
jne 0x140006256
mov byte [rax], 0x24
add rax, rdi
sub rcx, rdi
jne 0x140006244
mov rcx, qword [rbp]
mov r9d, edi
mov dword [rsp + 0x28], edx
xor r8d, r8d
lea rdx, str.NodeId
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rsi
call fcn.14016f3a8
mov qword [rbp + 8], r13
jmp 0x14000629d
mov rcx, qword [rbp]
lea rdx, str.NodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea rcx, [rbx + 0x5d8]
mov r8, r15
mov edx, 0x30
call fcn.1400715a8
or rax, 0xffffffffffffffff
inc rax
cmp byte [r15 + rax], r13b
jne 0x1400062b5
mov rcx, qword [rbp]
lea rdx, str.AgentHash
mov dword [rsp + 0x28], eax
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], r15
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea rsi, str.MeshID
mov edx, 0x400
mov rcx, rsi
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rsi
call fcn.14007b934
test eax, eax
je 0x1400063ad
mov edx, 0x400
mov rcx, rsi
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea r9, [0x140221180]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
mov rdx, rsi
call fcn.14007b934
test eax, eax
jle 0x1400063ad
lea r8, [rbp + 8]
mov edx, eax
lea rcx, [0x140221180]
call fcn.140076bb0
test eax, eax
jle 0x1400063ad
mov rsi, qword [rbp + 8]
test rsi, rsi
je 0x1400063ad
movsxd rdx, eax
test eax, eax
jle 0x140006383
mov rcx, rsi
cmp byte [rcx], 0x2b
jne 0x140006373
mov byte [rcx], 0x40
jmp 0x14000637b
cmp byte [rcx], 0x2f
jne 0x14000637b
mov byte [rcx], 0x24
add rcx, rdi
sub rdx, rdi
jne 0x140006369
mov rcx, qword [rbp]
lea rdx, str.MeshId
mov dword [rsp + 0x28], eax
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rsi
call fcn.14016f3a8
jmp 0x1400063be
mov rcx, qword [rbp]
lea rdx, str.MeshId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rsi, [0x140221180]
mov r9, rsi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
lea rdx, str.MeshServer
call fcn.14007b934
test eax, eax
jne 0x14000640b
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006438
or rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r13b
jne 0x14000640f
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
mov dword [rsp + 0x28], eax
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.ServerID
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.ServerID
mov r9, rsi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
call fcn.14007b934
test eax, eax
jne 0x14000647e
mov rcx, qword [rbp]
lea rdx, str.MeshServerId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x1400064ab
or rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r13b
jne 0x140006482
mov rcx, qword [rbp]
lea rdx, str.MeshServerId
mov dword [rsp + 0x28], eax
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.WebProxy
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.WebProxy
mov r9, rsi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
call fcn.14007b934
test eax, eax
jne 0x1400064f1
mov rcx, qword [rbp]
lea rdx, str.Proxy
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x14000651e
or rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r13b
jne 0x1400064f5
mov rcx, qword [rbp]
lea rdx, str.Proxy
mov dword [rsp + 0x28], eax
mov r9d, edi
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
mov rcx, r14
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
mov r9, rsi
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
mov rdx, r14
call fcn.14007b934
test eax, eax
jne 0x140006558
mov rcx, qword [rbp]
mov rdx, r14
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006581
or rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], r13b
jne 0x14000655c
mov rcx, qword [rbp]
mov r9d, edi
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov rdx, r14
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbx + 0x40]
lea rdx, [rbx + 0x650]
cmp qword [rdx], r13
jne 0x1400065a2
xor r8d, r8d
xor edx, edx
jmp 0x1400065a9
mov r8, qword [rbx + 0x638]
call fcn.14007f3bc
mov eax, 2
cmp dword [rbp + 0x20], r13d
je 0x1400065f7
cmp r12d, edi
je 0x1400065f7
cmp r12d, eax
jne 0x140005d44
mov rsi, qword [rbp + 0x48]
lea rdx, [0x1401e2eb8]
mov rcx, qword [rsi + 8]
call fcn.1401792d0
test eax, eax
je 0x1400065f7
mov rcx, qword [rsi + 8]
lea rdx, str.connect
call fcn.1401792d0
test eax, eax
jne 0x140005d44
mov rcx, qword [rbx + 0x38]
lea rdx, str..update.exe
call fcn.140002618
test rax, rax
je 0x140006614
mov rcx, rax
call fcn.1401770a0
mov rcx, qword [rbx + 0x38]
lea rdx, str..corereset
call fcn.140002618
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.1401781a0
lea r12, str.CoreModule
mov r14d, 0x400
test eax, eax
jne 0x140006669
mov edx, r14d
mov rcx, r12
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov rdx, r12
call fcn.14007ba6c
test rsi, rsi
je 0x140006669
mov rcx, rsi
call fcn.1401770a0
cmp dword [rbx + 0x60], r13d
jne 0x140006695
mov rdx, r14
mov rcx, r12
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, r12
call fcn.14007b934
mov esi, eax
jmp 0x140006698
mov esi, r13d
mov rdx, r14
lea rcx, str.webSocketMaskOverride
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.webSocketMaskOverride
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.14007b934
mov rdx, r14
mov dword [rbx + 0x5d0], eax
lea r14, str.jsDebugPort
mov rcx, r14
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, r14
call fcn.14007b934
test eax, eax
je 0x140006741
mov edx, 0x400
mov rcx, r14
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x48]
mov r8d, eax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov rdx, r14
call fcn.14007b934
test eax, eax
jle 0x140006741
cdqe
cmp rax, 0x10
jae 0x140006ae8
lea rcx, [rbp + 0x48]
mov byte [rbp + rax + 0x48], r13b
call fcn.140170130
mov dword [rbx + 0x5d4], eax
mov rcx, qword [rbx + 0x10]
mov r14d, 0xfffffffe
test rcx, rcx
je 0x1400067b8
mov rdx, qword [rbx]
call fcn.1400020bc
mov rcx, qword [rbx + 0x10]
lea r8, str.emit
or edx, 0xffffffff
call fcn.14000e310
mov rcx, qword [rbx + 0x10]
or r8d, 0xffffffff
mov edx, r14d
call fcn.14000f23c
mov rcx, qword [rbx + 0x10]
lea rdx, str.Ready
call fcn.140010c3c
mov rcx, qword [rbx + 0x10]
mov edx, edi
call fcn.14000d2d0
test eax, eax
je 0x1400067af
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400067af
lea rdx, [0x1401e1608]
call fcn.14004f840
mov rcx, qword [rbx + 0x10]
call fcn.140011914
cmp dword [rbx + 0x60], r13d
jne 0x14000693c
call fcn.140067b9c
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x30]
xor r8d, r8d
mov qword [rsp + 0x48], r13
xor edx, edx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.140067c24
mov r8, rbx
mov qword [rbx + 0x10], rax
mov rcx, rax
call fcn.14000259c
mov rcx, qword [rbx + 0x10]
lea rdx, [0x140005a7c]
mov r8, rbx
call fcn.14004f7bc
test esi, esi
jle 0x14000693c
mov edx, 0x400
lea rcx, str.noUpdateCoreModule
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.noUpdateCoreModule
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.14007b934
test eax, eax
je 0x1400068e7
lea rcx, str._CoreModule:_Update_Disabled_n
mov dword [rbx + 0x60], edi
call fcn.140001090
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, esi
call fcn.140073214
mov edx, 0x400
mov rcx, r12
mov r14, rax
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
mov r9, r14
mov r8d, eax
mov dword [rsp + 0x20], esi
mov rdx, r12
call fcn.14007b934
mov rcx, qword [rbx + 0x10]
lea r8d, [rsi - 4]
lea rdx, [r14 + 4]
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
call fcn.1400682f4
test eax, eax
jne 0x1400068d4
mov rcx, qword [rbx + 0x10]
call fcn.1400683b8
test eax, eax
je 0x1400068dd
mov rcx, qword [rbx + 0x10]
call fcn.140011914
mov rcx, r14
call fcn.14016f3a8
jmp 0x14000693c
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp + 0x48]
mov qword [rbp + 0x48], rbx
call fcn.14004fe80
mov rcx, qword [rbx + 0x10]
mov qword [rbx + 0x5c8], rax
call fcn.140010df4
mov rdx, qword [rbx + 0x5c8]
mov rcx, qword [rbx + 0x10]
call fcn.1400116a8
mov rcx, qword [rbx + 0x5c8]
call fcn.14004f028
mov rcx, qword [rbx + 0x10]
mov r8, rax
mov edx, r14d
call fcn.14000e4ac
mov rcx, qword [rbx + 0x10]
call fcn.140011914
mov rcx, qword [rbx]
lea rdx, [0x140005a88]
mov r8, rbx
call fcn.1400720f4
mov rcx, rbx
call fcn.140005294
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.14017015c
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshServer
mov r9, r15
mov dword [rsp + 0x20], 0x1000
mov r8d, eax
call fcn.14007b934
cmp eax, 5
jle 0x140006ab1
mov eax, dword [0x140220180]
cmp eax, dword [str.local]
jne 0x140006ab1
mov al, byte [0x140220184]
cmp al, byte [0x1401e28f8]
jne 0x140006ab1
xor eax, eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rax
mov dword [rbp + 0x40], eax
call fcn.140078850
mov r14d, 0x425d
test eax, eax
je 0x140006a02
mov esi, reloc.WS2_32.dll_socket
mov ecx, r14d
mov word [rbp + 0x28], si
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x30]
mov ecx, esi
lea rdx, str.FF02:0:0:0:0:0:0:FE
mov word [rbp + 0x2a], ax
call fcn.140078aa4
mov esi, 2
mov ecx, r14d
mov word [rbp + 0x48], si
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x4c]
mov ecx, esi
lea rdx, str.239.255.255.235
mov word [rbp + 0x4a], ax
call fcn.140078aa4
mov rcx, qword [rbx]
lea rax, [rbp + 0x28]
mov r8d, 0x425e
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.1400728d4
mov qword [rbx + 0x738], rax
test rax, rax
jne 0x140006a64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xf50
jmp 0x140006a99
mov rcx, qword [rbx]
lea rax, [rbp + 0x28]
xor r8d, r8d
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.1400728d4
mov qword [rbx + 0x740], rax
test rax, rax
jne 0x140006ab1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0xf54
mov r9d, 0xdb
mov dword [rsp + 0x20], eax
lea rdx, str...meshcore_agentcore.c
xor ecx, ecx
call fcn.140078e6c
mov eax, edi
mov rcx, qword [rbp + 0x160]
xor rcx, rbp
call fcn.140168070
mov rbx, qword [rbp + 0x1a8]
mov rsi, qword [rbp + 0x1b0]
mov rdi, qword [rbp + 0x1b8]
lea rsp, [rbp + 0x170]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14016819c
int3