Function at 0x14000e71c
Capabilities:
Set current directory

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13b0]
mov eax, 0x14b0
call fcn.1401da3f0
sub rsp, rax
mov rax, qword [0x14030cf00]
xor rax, rsp
mov qword [rbp + 0x13a0], rax
mov rdi, qword [0x140315f88]
lea rcx, [rsp + 0x60]
xor r13d, r13d
mov r14, r8
mov edx, 0x400
mov esi, r13d
lea r9d, [r13 + 1]
lea r8d, [r13 + 8]
call fcn.14009faa0
mov rbx, rax
cmp qword [rax - 0x10], r13
jbe 0x14000e793
mov rcx, qword [rax - 0x18]
add rcx, 0x18
add rcx, rax
jmp 0x14000e796
mov rcx, r13
mov qword [rcx], rdi
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x14000e7ae
mov ecx, 2
call rax
jmp 0x14000e7b4
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
cmp dword [rbp + 0x13f8], 1
jne 0x14000e7d0
mov rcx, qword [r14]
lea rdx, str.__slave
call fcn.1401f5c80
test eax, eax
je 0x14000e7ed
cmp dword [rbp + 0x13f8], 2
jne 0x14000e83b
mov rcx, qword [r14 + 8]
lea rdx, str.__slave
call fcn.1401f5c80
test eax, eax
jne 0x14000e7fa
mov rcx, rdi
call fcn.14000a318
jmp 0x14000ee41
mov rcx, qword [r14 + 8]
lea rdx, str.__netinfo
call fcn.1401f5c80
test eax, eax
jne 0x14000e83b
lea rcx, [rsp + 0x40]
call fcn.140013994
test eax, eax
jle 0x14000ee41
mov rdx, qword [rsp + 0x40]
lea rcx, str._s_r_n
call fcn.14000105c
mov rcx, qword [rsp + 0x40]
jmp 0x14000ee3c
or r12, 0xffffffffffffffff
cmp qword [rdi + 0x38], r13
jne 0x14000e88e
mov qword [rdi + 0x38], rbx
lea rdx, [rbp + 0x3a0]
mov r8d, 0x800
mov byte [rbx], r13b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [rbx - 0x18]
lea r8, [rbp + 0x3a0]
mov qword [rsp + 0x38], r13
mov r9d, r12d
mov qword [rsp + 0x30], r13
xor edx, edx
mov dword [rsp + 0x28], eax
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rdi + 0x38]
lea rdx, [rdi + 0xc10]
call fcn.140004b84
mov r15d, 1
cmp dword [rbp + 0x13f8], r15d
jle 0x14000e963
lea rbx, [r14 + 8]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14000e8c2
mov rax, r13
jmp 0x14000e8cc
mov edx, 0x1000
call fcn.1401e9dbc
mov rcx, qword [rbx]
lea r8, [0x1402719c4]
movsxd rdx, eax
mov r9d, 1
call fcn.1400a913c
mov r12d, eax
cmp eax, 2
jle 0x14000e942
mov rcx, qword [rbx]
lea rdx, [0x140271c44]
mov r8d, 2
call fcn.1401e80f0
test eax, eax
jne 0x14000e942
cmp r12d, 0xf
jne 0x14000e942
mov rcx, qword [rbx]
lea r8d, [rax + 0xd]
add rcx, 2
lea rdx, str.configUsesCWD
call fcn.1401e80f0
test eax, eax
jne 0x14000e942
mov rcx, qword [rbx]
lea r8d, [r12 - 0xe]
add rcx, 0x10
lea rdx, [0x140270928]
call fcn.1401e80f0
test eax, eax
je 0x14000e958
inc r15d
add rbx, 8
cmp r15d, dword [rbp + 0x13f8]
jl 0x14000e8b5
jmp 0x14000e95f
mov dword [rdi + 0x50], 1
or r12, 0xffffffffffffffff
mov rcx, qword [rdi + 0x38]
lea rdx, str..log
call fcn.140003e7c
mov rcx, rax
xor edx, edx
call fcn.1400a95b4
mov qword [0x140315f48], rax
call fcn.14009ddbc
mov rcx, qword [rdi]
lea rdx, [0x14000a488]
mov r8, rdi
call fcn.14009fecc
mov rcx, qword [r14]
lea r8, [0x14026f804]
mov rdx, r12
call fcn.1400a91c0
test eax, eax
jle 0x14000ea10
mov r8, qword [r14]
lea rcx, [0x14031b480]
movsxd rbx, eax
mov r15d, 0x10000
mov r9, rbx
mov edx, r15d
call fcn.1401e7614
cmp rbx, r15
jae 0x14000ee6d
lea r8, [0x14031b480]
mov dword [rsp + 0x28], 0x1000
mov byte [rbx + r8], r13b
mov r9d, r12d
lea rbx, [0x140317480]
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rax, [rbp + 0x13f8]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r14
cmp qword [rdi + 0x20], r13
jne 0x14000edf7
cmp dword [rbp + 0x13f8], 2
jl 0x14000ea92
mov rcx, qword [r14 + 8]
lea r8, [0x14027269c]
mov r9d, 3
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.1400a9074
test eax, eax
jne 0x14000edf7
cmp dword [rbp + 0x13f8], 2
jl 0x14000ea92
mov rcx, qword [r14 + 8]
lea r9d, [rax + 4]
lea r8, str..zip
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.1400a9074
test eax, eax
jne 0x14000edf7
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000e6e0]
call fcn.1400a03f8
mov rcx, qword [rdi]
call fcn.1400a3cb8
mov qword [rdi], r13
cmp qword [rdi + 0x48], r13
je 0x14000ee19
cmp dword [rdi + 0xbe0], r13d
je 0x14000eddb
cmp dword [rdi + 0xdc0], r13d
jne 0x14000ecba
call fcn.1400914e8
mov rbx, qword [rdi + 0x48]
mov rcx, rax
mov r15, rax
call fcn.1400205b0
mov r8, r15
lea rdx, [0x140098148]
mov rcx, rbx
call fcn.1400ae33c
mov edx, r12d
mov rcx, r15
call fcn.14001ecc4
test rax, rax
je 0x14000ec9c
mov edx, r12d
mov rcx, r15
call fcn.14001cb88
lea r8, [rsp + 0x40]
mov edx, r12d
mov rcx, r15
call fcn.14001e85c
mov rbx, qword [rsp + 0x40]
mov r12, rax
movabs rax, 0xaaaaaaaaaaaaaaab
lea rcx, [rbx*4 + 4]
mul rcx
mov ecx, 0xfffffffa
lea rax, [rbx + 1]
mov rsi, rdx
shr rsi, 1
sub rcx, rsi
cmp rax, rcx
jae 0x14000ebb1
mov eax, 0xfffffffe
lea rdx, [rsi + 5]
sub rax, rbx
cmp rdx, rax
jae 0x14000ebb1
lea rax, [rbx + 6]
mov ecx, 0xffffffe7
add rax, rsi
cmp rax, rcx
jae 0x14000ebb1
test rdx, rdx
je 0x14000eb94
lea rax, [rbx + 0x1e]
add rax, rsi
cmp rax, rcx
jae 0x14000ebb1
cmp r13, rdx
lea rcx, [rsi + 0x1e]
sbb rax, rax
and eax, 0x18
add rcx, rax
add rcx, rbx
call fcn.1401ea40c
mov rcx, rax
jmp 0x14000ebb4
mov rcx, r13
lea eax, [rsi + 5]
xor r9d, r9d
movsxd r8, eax
lea eax, [rbx + 1]
movsxd rdx, eax
call fcn.14009faa0
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000ebde
mov rax, qword [rax - 0x18]
add rax, 0x18
add rax, rsi
jmp 0x14000ebe1
mov rax, r13
mov qword [rsp + 0x40], rax
lea r14, [rbx + 1]
test rbx, rbx
je 0x14000ec3d
test r12, r12
je 0x14000ec09
cmp r14, rbx
jb 0x14000ec09
mov r8, rbx
mov rdx, r12
mov rcx, rsi
call fcn.14020df90
jmp 0x14000ec3d
mov r8, r14
xor edx, edx
mov rcx, rsi
call fcn.14020e630
test r12, r12
jne 0x14000ec28
call fcn.1401e8db4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x14000ec38
cmp r14, rbx
jae 0x14000ec3d
call fcn.1401e8db4
mov dword [rax], 0x22
call fcn.1401e7e2c
mov rcx, r15
call fcn.140069da8
mov rcx, rsi
cmp rbx, 0x7fffffff
jbe 0x14000ec6f
call fcn.14009fb80
mov rsi, r13
cmp dword [rdi + 0xbec], r13d
je 0x14000eddb
lea rcx, str._Service_Parameters___ERROR
jmp 0x14000ecb0
lea r8, [rsp + 0x40]
mov edx, ebx
call fcn.1400a75c0
cmp dword [rdi + 0xbec], r13d
je 0x14000eddb
mov rdx, rsi
lea rcx, str._Service_Parameters____s
call fcn.1400aa3cc
jmp 0x14000eddb
cmp dword [rdi + 0xbec], r13d
je 0x14000eddb
lea rcx, str._Service_Parameters___NONE
call fcn.1400aa3cc
jmp 0x14000eddb
mov rbx, qword [rdi + 0xdd8]
lea rdx, str.meshagent
mov rcx, rbx
call fcn.1401f5c80
test eax, eax
je 0x14000eddb
mov r9, qword [rbx - 0x18]
movabs rsi, 0xaaaaaaaaaaaaaaab
mov rax, rsi
lea r8, [r9 + 0x1e]
lea rcx, [r8*4]
mul rcx
mov ecx, 0xfffffffa
shr rdx, 1
sub rcx, rdx
cmp r8, rcx
jae 0x14000ed59
mov eax, 0xffffffe1
lea r8, [rdx + 5]
sub rax, r9
cmp r8, rax
jae 0x14000ed59
lea rax, [r9 + 0x23]
mov ecx, 0xffffffe7
add rax, rdx
cmp rax, rcx
jae 0x14000ed59
test r8, r8
je 0x14000ed3b
lea rax, [r9 + 0x3b]
add rax, rdx
cmp rax, rcx
jae 0x14000ed59
mov ecx, gethostname
test r8, r8
lea eax, [rcx + 0x18]
cmovne ecx, eax
add rcx, r8
add rcx, r9
call fcn.1401ea40c
mov r10, rax
jmp 0x14000ed5c
mov r10, r13
mov r9, qword [rdi + 0xdd8]
mov rax, qword [r9 - 0x18]
lea rcx, [rax*4 + 0x78]
mov rax, rsi
mul rcx
mov eax, dword [r9 - 0x18]
mov rcx, r10
shr rdx, 1
add eax, 0x1e
add rdx, 5
xor r9d, r9d
movsxd r8, edx
movsxd rdx, eax
call fcn.14009faa0
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000edaa
mov rcx, qword [rax - 0x18]
add rcx, 0x18
add rcx, rax
jmp 0x14000edad
mov rcx, r13
mov r9, qword [rdi + 0xdd8]
lea r8, str.____meshServiceName__s___
mov rdx, qword [rax - 0x18]
mov qword [rsp + 0x40], rcx
mov rcx, rsi
call fcn.140001114
mov edx, eax
lea r8, [rsp + 0x40]
mov rcx, rsi
call fcn.1400a75c0
mov rcx, qword [rdi + 0x48]
call fcn.1400aef60
mov qword [rdi + 0x48], r13
test rsi, rsi
je 0x14000ee19
mov rcx, rsi
call fcn.14009fb80
jmp 0x14000ee19
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000e6c8]
call fcn.1400a03f8
mov rcx, qword [rdi]
call fcn.1400a3cb8
mov qword [rdi], r13
mov eax, dword [0x1403155bc]
dec eax
mov dword [0x1403155bc], eax
test eax, eax
jg 0x14000ee30
call fcn.1400e6720
mov rcx, qword [0x140315f48]
test rcx, rcx
je 0x14000ee41
call fcn.1401e8ee0
xor eax, eax
mov rcx, qword [rbp + 0x13a0]
xor rcx, rsp
call fcn.1401d9e80
mov rbx, qword [rsp + 0x14f0]
add rsp, 0x14b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401d9fa8
int3