Function at 0x140006390
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x198], rbx
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], rdi
mov rax, qword [0x140271510]
xor rax, rbp
mov qword [rbp + 0x150], rax
movsxd r12, edx
xor r14d, r14d
xor edi, edi
mov dword [rbp + 0x18], r9d
mov qword [rbp + 0x40], r8
mov r15d, r9d
mov dword [rbp + 0x1c], r12d
mov r13, r8
mov rbx, rcx
mov rsi, r12
test edx, edx
jle 0x14000644a
lea r12d, [r14 + 1]
mov rcx, qword [r13 + rdi*8]
lea rdx, str._recovery
call fcn.14017f7c0
test eax, eax
jne 0x140006410
or dword [rbx + 0x7c], 0x40
xor r15d, r15d
mov rcx, qword [r13 + rdi*8]
lea rdx, str._nocertstore
call fcn.14017f7c0
test eax, eax
jne 0x14000643b
xor r15d, r15d
lea rcx, str._Not_using_Certificate_Store__n
call fcn.140001090
mov dword [rbx + 0x650], r12d
add rdi, r12
cmp rdi, rsi
jl 0x1400063f4
mov dword [rbp + 0x18], r15d
mov r12d, esi
xor esi, esi
cmp qword [rbx + 0x48], rsi
jne 0x1400064fe
mov rcx, qword [rbx + 0x38]
lea rdx, [0x1401e8efc]
call fcn.140002b90
mov rcx, rax
xor r8d, r8d
call fcn.140080aec
mov qword [rbx + 0x48], rax
cmp rax, rsi
jne 0x1400064fe
mov qword [0x140275180], rbx
mov dword [0x140275188], r12d
mov qword [0x140275190], r13
mov dword [0x140275198], r15d
mov edx, dword [rbx + 0x780]
cmp edx, 0xa
je 0x1400064eb
inc edx
lea rcx, str.Unable_to_open_database___d_10_..._r_n
call fcn.140001090
mov rcx, qword [rbx]
lea edi, [rsi + 1]
add dword [rbx + 0x780], edi
lea r9, [0x140006224]
mov r8d, 0x7d0
mov qword [rsp + 0x20], rsi
lea rdx, [0x140275180]
mov rcx, qword [rcx + 0x4f8]
call fcn.14007bdac
mov eax, edi
jmp 0x1400073c0
lea rcx, str.Unable_to_open_database._r_n
call fcn.140001090
xor eax, eax
jmp 0x1400073c0
mov rdx, qword [rbx]
call fcn.140083c24
mov qword [rbx + 0x40], rax
lea rdx, [0x1401e8f48]
lea rax, [rbp + 8]
mov dword [rbp + 0x10], esi
mov r9d, 0xf003f
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000658b
mov rcx, qword [rbp + 8]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rdx, str.ResetNodeId
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140006581
cmp dword [rbp + 0x10], esi
jbe 0x140006581
mov rcx, qword [rbp + 8]
lea rdx, str.ResetNodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
mov eax, 1
cmove r14d, eax
mov rcx, qword [rbp + 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.14006c0f8
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x38]
xor r8d, r8d
mov qword [rsp + 0x48], rsi
xor edx, edx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.14006c180
mov r9d, 0xe88
mov qword [rbp + 0x10], rax
lea rdx, str._function__getMac____var_ret____var_ni__require_os_.networkInterfaces____for__var_f_in_ni___for__var_i_in_ni_f____if_ni_f__i_.type__ethernet__ni_f__i_.type__wireless__ret______ni_f__i_.mac________return_ret_______
mov rcx, rax
mov r13, rax
call fcn.14000e648
test eax, eax
jne 0x14000664b
lea r8, [rbp + 8]
or edx, 0xffffffff
mov rcx, r13
call fcn.14001011c
mov rdi, qword [rbp + 8]
mov r12, rax
cmp rdi, 0x13
jb 0x14000664b
mov edx, 0x400
lea rcx, str.LocalMacAddresses
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
xor r9d, r9d
mov dword [rsp + 0x20], esi
mov r8d, eax
call fcn.140080d44
movsxd r15, eax
test eax, eax
jne 0x140006680
mov rcx, qword [rbx + 0x48]
lea r8d, [rax + 0x11]
mov r9, r12
mov dword [rsp + 0x20], edi
lea rdx, str.LocalMacAddresses
call fcn.140080bd0
mov r15d, 1
test r13, r13
je 0x14000665f
mov rcx, qword [r13 + 0x40]
call fcn.140023c3c
cmp r14d, r15d
je 0x1400067a4
mov rcx, rbx
call fcn.140002ffc
xor r13d, r13d
test eax, eax
je 0x1400067bf
jmp 0x1400067a7
test edi, edi
jle 0x14000664b
movsxd rcx, esi
lea rdx, str._00:00:00:00:00:00_
add rcx, r12
mov r8d, reloc.WS2_32.dll_send
call fcn.140174630
test eax, eax
jne 0x1400066a7
add esi, 0x13
cmp esi, edi
jl 0x140006684
cmp esi, edi
jge 0x14000664b
lea rax, [r15 + 0x38]
xor esi, esi
lea rcx, [rax + 0xf]
mov rdx, r15
cmp rcx, rax
ja 0x1400066c7
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.14016df80
sub rsp, rcx
mov r9d, 1
lea rcx, [rsp + 0x50]
lea r8d, [r9 + 7]
call fcn.140077f24
mov edx, 0x400
mov qword [rbp + 8], rax
lea rcx, [rax + 8]
mov qword [rax], rcx
lea rcx, str.LocalMacAddresses
call fcn.140175a7c
mov r9, qword [rbp + 8]
lea rdx, str.LocalMacAddresses
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov dword [rsp + 0x20], r15d
call fcn.140080d44
test r15d, r15d
jle 0x14000677b
mov r13, qword [rbp + 8]
movsxd rax, esi
lea rdx, str._00:00:00:00:00:00_
add rax, r13
mov r8d, reloc.WS2_32.dll_send
mov rcx, rax
mov qword [rbp + 8], rax
call fcn.140174630
test eax, eax
je 0x140006766
mov r8, qword [rbp + 8]
mov r9d, reloc.WS2_32.dll_send
mov edx, edi
mov rcx, r12
call fcn.14007d180
test eax, eax
jns 0x14000676e
add esi, 0x13
cmp esi, r15d
jl 0x14000672b
mov r13, qword [rbp + 0x10]
cmp esi, r15d
jl 0x14000664b
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
mov r15d, 1
mov dword [rsp + 0x20], edi
mov r9, r12
mov r14d, r15d
lea r8d, [r15 + 0x10]
call fcn.140080bd0
jmp 0x140006651
xor r13d, r13d
mov rcx, rbx
call fcn.140002d24
test eax, eax
je 0x1400067bf
lea rcx, str.Certificate_error_r_n
call fcn.140001090
mov rcx, rbx
call fcn.1400032fc
test eax, eax
je 0x1400067d7
lea rcx, str.Certificate_validation_error_r_n
call fcn.140001090
mov rcx, qword [rbx + 0x38]
lea rdx, str..tag
mov qword [rbp + 8], r13
call fcn.140002b90
mov rcx, rax
lea rdx, [rbp + 8]
call fcn.14007662c
mov rdi, qword [rbp + 8]
lea r14, [0x1401e8474]
mov rcx, qword [rbx + 0x48]
mov r8d, 3
mov rdx, r14
test rdi, rdi
je 0x14000682a
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.140080bd0
mov rcx, rdi
call fcn.140174cc8
jmp 0x14000682f
call fcn.140080e7c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x50]
mov r8d, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x20], 0xff
lea rdx, str.ignoreProxyFile
call fcn.140080d44
test eax, eax
jne 0x1400068ae
mov rcx, qword [rbx + 0x38]
lea rdx, str..proxy
mov qword [rbp + 8], r13
call fcn.140002b90
mov rcx, rax
lea rdx, [rbp + 8]
call fcn.14007662c
mov rdi, qword [rbp + 8]
test rdi, rdi
je 0x1400068ae
mov rcx, qword [rbx + 0x48]
mov r8d, 8
lea rdx, str.WebProxy
test eax, eax
jle 0x1400068a1
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.140080bd0
jmp 0x1400068a6
call fcn.140080e7c
mov rcx, rdi
call fcn.140174cc8
mov rcx, qword [rbx + 0x38]
lea rdx, str..mshx
call fcn.140002b90
mov rdx, rax
mov rcx, rbx
call fcn.140005d84
test eax, eax
jne 0x140006935
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002b90
mov rdx, rax
mov rcx, rbx
call fcn.140005d84
test eax, eax
jne 0x140006935
lea rdx, str.mesh_linumshx
mov rcx, rbx
call fcn.140005d84
test eax, eax
jne 0x140006935
lea rdx, str.mesh_limshx
mov rcx, rbx
call fcn.140005d84
test eax, eax
jne 0x140006935
mov rcx, rbx
call fcn.140005bc8
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002b90
mov rdx, rax
mov rcx, rbx
call fcn.140005d84
mov esi, 0x400
mov dword [rbp + 0x10], r13d
lea rdi, str.AgentCapabilities
mov edx, esi
mov rcx, rdi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rdi
call fcn.140080d44
cmp eax, 4
jne 0x14000699c
mov edx, esi
mov rcx, rdi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x10]
mov r8d, eax
mov dword [rsp + 0x20], 4
mov rdx, rdi
call fcn.140080d44
mov ecx, dword [rbp + 0x10]
call qword [sym.imp.WS2_32.dll_ntohl]
or dword [rbx + 0x7c], eax
mov eax, dword [rbx + 0x784]
lea r8, [rbp]
neg eax
lea rdx, [0x1401e8f48]
sbb rcx, rcx
add rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea r12, [0x140275180]
test eax, eax
jne 0x140006e9b
test byte [rbx + 0x7c], 0x40
lea r15, [rbx + 0x728]
lea esi, [rax + 0x30]
mov qword [rbp + 0x10], r13
mov rcx, r15
lea r8, [rbp + 0x10]
mov edx, esi
jne 0x140006d83
call fcn.14007baa0
movsxd rdx, eax
test eax, eax
jle 0x140006a5a
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006a5a
lea r8d, [rsi - 0x2f]
mov rcx, rdx
test eax, eax
jle 0x140006a2c
mov rax, rdi
cmp byte [rax], 0x2b
jne 0x140006a1c
mov byte [rax], 0x40
jmp 0x140006a24
cmp byte [rax], 0x2f
jne 0x140006a24
mov byte [rax], 0x24
add rax, r8
sub rcx, r8
jne 0x140006a12
mov rcx, qword [rbp]
mov r9d, r8d
mov dword [rsp + 0x28], edx
xor r8d, r8d
lea rdx, str.NodeId
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.140174cc8
mov qword [rbp + 0x10], r13
jmp 0x140006a6b
mov rcx, qword [rbp]
lea rdx, str.NodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea rcx, [rbx + 0x5f0]
mov r8, r12
mov edx, esi
call fcn.140076428
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], r13b
jne 0x140006a80
mov rcx, qword [rbp]
lea rdx, str.AgentHash
mov dword [rsp + 0x28], eax
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.MeshID
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshID
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.140080d44
lea rdi, [0x140276180]
test eax, eax
je 0x140006b89
mov edx, 0x400
lea rcx, str.MeshID
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshID
mov r9, rdi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
call fcn.140080d44
test eax, eax
jle 0x140006b89
lea r8, [rbp + 0x10]
mov edx, eax
mov rcx, rdi
call fcn.14007baa0
test eax, eax
jle 0x140006b89
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006b89
movsxd rdx, eax
mov r8d, 1
test eax, eax
jle 0x140006b5f
mov rcx, rdi
cmp byte [rcx], 0x2b
jne 0x140006b4f
mov byte [rcx], 0x40
jmp 0x140006b57
cmp byte [rcx], 0x2f
jne 0x140006b57
mov byte [rcx], 0x24
add rcx, r8
sub rdx, r8
jne 0x140006b45
mov rcx, qword [rbp]
lea rdx, str.MeshId
mov r9d, r8d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.140174cc8
jmp 0x140006b9a
mov rcx, qword [rbp]
lea rdx, str.MeshId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdi, [0x140276180]
mov r9, rdi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
lea rdx, str.MeshServer
call fcn.140080d44
test eax, eax
jne 0x140006bec
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edi, 1
jmp 0x140006c1e
or rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], r13b
jne 0x140006bf0
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
mov edi, 1
mov r9d, edi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.ServerID
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea r9, [0x140276180]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
lea rdx, str.ServerID
call fcn.140080d44
test eax, eax
jne 0x140006c68
mov rcx, qword [rbp]
lea rdx, str.MeshServerId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006c9c
or rax, 0xffffffffffffffff
lea rcx, [0x140276180]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006c73
mov dword [rsp + 0x28], eax
lea rdx, str.MeshServerId
mov qword [rsp + 0x20], rcx
mov r9d, edi
mov rcx, qword [rbp]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.WebProxy
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea r9, [0x140276180]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
lea rdx, str.WebProxy
call fcn.140080d44
test eax, eax
jne 0x140006ce6
mov rcx, qword [rbp]
lea rdx, str.Proxy
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006d1a
or rax, 0xffffffffffffffff
lea rcx, [0x140276180]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006cf1
mov dword [rsp + 0x28], eax
lea rdx, str.Proxy
mov qword [rsp + 0x20], rcx
mov r9d, edi
mov rcx, qword [rbp]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
mov rcx, r14
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea r9, [0x140276180]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
mov rdx, r14
call fcn.140080d44
test eax, eax
jne 0x140006d51
mov rdx, r14
jmp 0x140006df0
or rax, 0xffffffffffffffff
lea rcx, [0x140276180]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006d5c
mov dword [rsp + 0x28], eax
mov r9d, edi
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, qword [rbp]
mov rdx, r14
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x140006dfa
call fcn.14007baa0
test eax, eax
jle 0x140006de9
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006de9
movsxd rdx, eax
mov r8d, 1
test eax, eax
jle 0x140006dbf
mov rcx, rdi
cmp byte [rcx], 0x2b
jne 0x140006daf
mov byte [rcx], 0x40
jmp 0x140006db7
cmp byte [rcx], 0x2f
jne 0x140006db7
mov byte [rcx], 0x24
add rcx, r8
sub rdx, r8
jne 0x140006da5
mov rcx, qword [rbp]
lea rdx, str.DiagnosticAgentNodeId
mov r9d, r8d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.140174cc8
jmp 0x140006dfa
lea rdx, str.DiagnosticAgentNodeId
mov rcx, qword [rbp]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edi, 0x400
lea rcx, str.SelfNodeCert
mov edx, edi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.SelfNodeCert
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.140080d44
test eax, eax
jne 0x140006e86
mov edx, edi
lea rdi, str.NodeID
mov rcx, rdi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
mov r9, r12
mov r8d, eax
mov dword [rsp + 0x20], 0x1000
mov rdx, rdi
call fcn.140080d44
cmp eax, esi
jne 0x140006e6d
mov r8, rsi
mov rdx, r12
mov rcx, r15
call fcn.14016ee60
test eax, eax
je 0x140006e86
mov rcx, qword [rbx + 0x48]
mov r9, r15
mov r8d, 6
mov dword [rsp + 0x20], esi
mov rdx, rdi
call fcn.140080bd0
mov rcx, qword [rbp]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, 0x400
mov r15d, 1
mov rcx, qword [rbx + 0x40]
lea rdx, [rbx + 0x678]
cmp qword [rdx], r13
jne 0x140006eb2
xor r8d, r8d
xor edx, edx
jmp 0x140006eb9
mov r8, qword [rbx + 0x660]
call fcn.14008483c
mov ecx, 2
cmp dword [rbp + 0x18], r13d
je 0x140006f09
mov eax, dword [rbp + 0x1c]
cmp eax, r15d
je 0x140006f09
cmp eax, ecx
jne 0x1400064f7
mov rdi, qword [rbp + 0x40]
lea rdx, [0x1401e9198]
mov rcx, qword [rdi + 8]
call fcn.14017f7c0
test eax, eax
je 0x140006f09
mov rcx, qword [rdi + 8]
lea rdx, str.connect
call fcn.14017f7c0
test eax, eax
jne 0x1400064f7
mov rcx, qword [rbx + 0x38]
lea rdx, str..update.exe
call fcn.140002b90
test rax, rax
je 0x140006f26
mov rcx, rax
call fcn.14017c938
mov rcx, qword [rbx + 0x38]
lea rdx, str..corereset
call fcn.140002b90
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.14017e094
lea r14, str.CoreModule
test eax, eax
jne 0x140006f75
mov rdx, rsi
mov rcx, r14
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov rdx, r14
call fcn.140080e7c
test rdi, rdi
je 0x140006f75
mov rcx, rdi
call fcn.14017c938
cmp dword [rbx + 0x70], r13d
jne 0x140006fa1
mov rdx, rsi
mov rcx, r14
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, r14
call fcn.140080d44
mov edi, eax
jmp 0x140006fa4
mov edi, r13d
mov rdx, rsi
lea rcx, str.webSocketMaskOverride
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.webSocketMaskOverride
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.140080d44
mov rdx, rsi
mov dword [rbx + 0x5e8], eax
lea rsi, str.jsDebugPort
mov rcx, rsi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rsi
call fcn.140080d44
test eax, eax
je 0x14000704d
mov edx, 0x400
mov rcx, rsi
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x40]
mov r8d, eax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov rdx, rsi
call fcn.140080d44
test eax, eax
jle 0x14000704d
cdqe
cmp rax, 0x10
jae 0x1400073f5
lea rcx, [rbp + 0x40]
mov byte [rbp + rax + 0x40], r13b
call fcn.140175a50
mov dword [rbx + 0x5ec], eax
mov rcx, qword [rbx + 0x10]
mov esi, 0xfffffffe
mov dword [rbx + 0x74], r15d
test rcx, rcx
je 0x1400070c7
mov rdx, qword [rbx]
call fcn.140002584
mov rcx, qword [rbx + 0x10]
lea r8, str.emit
or edx, 0xffffffff
call fcn.14000ed80
mov rcx, qword [rbx + 0x10]
or r8d, 0xffffffff
mov edx, esi
call fcn.14000fd74
mov rcx, qword [rbx + 0x10]
lea rdx, str.Ready
call fcn.1400118a8
mov rcx, qword [rbx + 0x10]
mov edx, r15d
call fcn.14000db60
test eax, eax
je 0x1400070be
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400070be
lea rdx, [0x1401e7638]
call fcn.140050df8
mov rcx, qword [rbx + 0x10]
call fcn.1400126d4
cmp dword [rbx + 0x70], r13d
jne 0x14000724b
call fcn.14006c0f8
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x30]
xor r8d, r8d
mov qword [rsp + 0x48], r13
xor edx, edx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.14006c180
mov r8, rbx
mov qword [rbx + 0x10], rax
mov rcx, rax
call fcn.140002b14
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400061c4]
mov r8, rbx
call fcn.140050d74
test edi, edi
jle 0x14000724b
mov edx, 0x400
lea rcx, str.noUpdateCoreModule
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.noUpdateCoreModule
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.140080d44
test eax, eax
je 0x1400071f7
lea rcx, str._CoreModule:_Update_Disabled_n
mov dword [rbx + 0x70], r15d
call fcn.140001090
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, edi
call fcn.1400780d8
mov edx, 0x400
mov rcx, r14
mov rsi, rax
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
mov r9, rsi
mov r8d, eax
mov dword [rsp + 0x20], edi
mov rdx, r14
call fcn.140080d44
mov rcx, qword [rbx + 0x10]
lea r8d, [rdi - 4]
lea rdx, [rsi + 4]
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
call fcn.14006c828
test eax, eax
jne 0x1400071e4
mov rcx, qword [rbx + 0x10]
call fcn.14006c8ec
test eax, eax
je 0x1400071ed
mov rcx, qword [rbx + 0x10]
call fcn.1400126d4
mov rcx, rsi
call fcn.140174cc8
jmp 0x14000724b
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp + 0x40]
mov qword [rbp + 0x40], rbx
call fcn.140051484
mov rcx, qword [rbx + 0x10]
mov qword [rbx + 0x5e0], rax
call fcn.140011b5c
mov rdx, qword [rbx + 0x5e0]
mov rcx, qword [rbx + 0x10]
call fcn.140012460
mov rcx, qword [rbx + 0x5e0]
call fcn.1400505dc
mov rcx, qword [rbx + 0x10]
mov r8, rax
mov edx, esi
call fcn.14000ef34
mov rcx, qword [rbx + 0x10]
call fcn.1400126d4
mov rcx, qword [rbx]
lea rdx, [0x1400061d0]
mov r8, rbx
call fcn.140076fb4
mov rcx, rbx
call fcn.140005988
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.140175a7c
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshServer
mov r9, r12
mov dword [rsp + 0x20], 0x1000
mov r8d, eax
call fcn.140080d44
cmp eax, 5
jle 0x1400073bd
mov eax, dword [0x140275180]
cmp eax, dword [str.local]
jne 0x1400073bd
mov al, byte [0x140275184]
cmp al, byte [0x1401e8b58]
jne 0x1400073bd
xor eax, eax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x38], eax
call fcn.14007d7b0
mov esi, 0x425d
test eax, eax
je 0x14000730f
mov edi, reloc.WS2_32.dll_socket
mov ecx, esi
mov word [rbp + 0x20], di
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x28]
mov ecx, edi
lea rdx, str.FF02:0:0:0:0:0:0:FE
mov word [rbp + 0x22], ax
call fcn.14007da04
mov edi, 2
mov ecx, esi
mov word [rbp + 0x40], di
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x44]
mov ecx, edi
lea rdx, str.239.255.255.235
mov word [rbp + 0x42], ax
call fcn.14007da04
mov rcx, qword [rbx]
lea rax, [rbp + 0x20]
mov r8d, 0x425e
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140077798
mov qword [rbx + 0x760], rax
test rax, rax
jne 0x140007370
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0x1064
jmp 0x1400073a5
mov rcx, qword [rbx]
lea rax, [rbp + 0x20]
xor r8d, r8d
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140077798
mov qword [rbx + 0x768], rax
test rax, rax
jne 0x1400073bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0x1068
mov r9d, 0xdb
mov dword [rsp + 0x20], eax
lea rdx, str...meshcore_agentcore.c
xor ecx, ecx
call fcn.14007ddcc
mov eax, r15d
mov rcx, qword [rbp + 0x150]
xor rcx, rbp
call fcn.14016d990
mov rbx, qword [rbp + 0x198]
mov rsi, qword [rbp + 0x1a0]
mov rdi, qword [rbp + 0x1a8]
lea rsp, [rbp + 0x160]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14016dabc
int3