Function at 0x14000e6ec
Capabilities:
Set current directory

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13b0]
mov eax, 0x14b0
call fcn.1401dc320
sub rsp, rax
mov rax, qword [0x14030ef00]
xor rax, rsp
mov qword [rbp + 0x13a0], rax
mov rdi, qword [0x140317fa0]
lea rcx, [rsp + 0x60]
xor r13d, r13d
mov r14, r8
mov edx, 0x400
mov esi, r13d
lea r9d, [r13 + 1]
lea r8d, [r13 + 8]
call fcn.14009fb24
mov rbx, rax
cmp qword [rax - 0x10], r13
jbe 0x14000e763
mov rcx, qword [rax - 0x18]
add rcx, 0x18
add rcx, rax
jmp 0x14000e766
mov rcx, r13
mov qword [rcx], rdi
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x14000e77e
mov ecx, 2
call rax
jmp 0x14000e784
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
cmp dword [rbp + 0x13f8], 1
jne 0x14000e7a0
mov rcx, qword [r14]
lea rdx, str.__slave
call fcn.1401f8a70
test eax, eax
je 0x14000e7bd
cmp dword [rbp + 0x13f8], 2
jne 0x14000e80b
mov rcx, qword [r14 + 8]
lea rdx, str.__slave
call fcn.1401f8a70
test eax, eax
jne 0x14000e7ca
mov rcx, rdi
call fcn.14000a308
jmp 0x14000ee11
mov rcx, qword [r14 + 8]
lea rdx, str.__netinfo
call fcn.1401f8a70
test eax, eax
jne 0x14000e80b
lea rcx, [rsp + 0x40]
call fcn.14001396c
test eax, eax
jle 0x14000ee11
mov rdx, qword [rsp + 0x40]
lea rcx, str._s_r_n
call fcn.14000105c
mov rcx, qword [rsp + 0x40]
jmp 0x14000ee0c
or r12, 0xffffffffffffffff
cmp qword [rdi + 0x38], r13
jne 0x14000e85e
mov qword [rdi + 0x38], rbx
lea rdx, [rbp + 0x3a0]
mov r8d, 0x800
mov byte [rbx], r13b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [rbx - 0x18]
lea r8, [rbp + 0x3a0]
mov qword [rsp + 0x38], r13
mov r9d, r12d
mov qword [rsp + 0x30], r13
xor edx, edx
mov dword [rsp + 0x28], eax
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rdi + 0x38]
lea rdx, [rdi + 0xc10]
call fcn.140004b84
mov r15d, 1
cmp dword [rbp + 0x13f8], r15d
jle 0x14000e933
lea rbx, [r14 + 8]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14000e892
mov rax, r13
jmp 0x14000e89c
mov edx, 0x1000
call fcn.1401ecbac
mov rcx, qword [rbx]
lea r8, [0x140274af4]
movsxd rdx, eax
mov r9d, 1
call fcn.1400a91d4
mov r12d, eax
cmp eax, 2
jle 0x14000e912
mov rcx, qword [rbx]
lea rdx, [0x140274d74]
mov r8d, 2
call fcn.1401eaee0
test eax, eax
jne 0x14000e912
cmp r12d, 0xf
jne 0x14000e912
mov rcx, qword [rbx]
lea r8d, [rax + 0xd]
add rcx, 2
lea rdx, str.configUsesCWD
call fcn.1401eaee0
test eax, eax
jne 0x14000e912
mov rcx, qword [rbx]
lea r8d, [r12 - 0xe]
add rcx, 0x10
lea rdx, [0x140273a58]
call fcn.1401eaee0
test eax, eax
je 0x14000e928
inc r15d
add rbx, 8
cmp r15d, dword [rbp + 0x13f8]
jl 0x14000e885
jmp 0x14000e92f
mov dword [rdi + 0x50], 1
or r12, 0xffffffffffffffff
mov rcx, qword [rdi + 0x38]
lea rdx, str..log
call fcn.140003e94
mov rcx, rax
xor edx, edx
call fcn.1400a9650
mov qword [0x140317f50], rax
call fcn.14009de40
mov rcx, qword [rdi]
lea rdx, [0x14000a478]
mov r8, rdi
call fcn.14009ff50
mov rcx, qword [r14]
lea r8, [0x1402728e4]
mov rdx, r12
call fcn.1400a9258
test eax, eax
jle 0x14000e9e0
mov r8, qword [r14]
lea rcx, [0x14031d520]
movsxd rbx, eax
mov r15d, 0x10000
mov r9, rbx
mov edx, r15d
call fcn.1401ea404
cmp rbx, r15
jae 0x14000ee3d
lea r8, [0x14031d520]
mov dword [rsp + 0x28], 0x1000
mov byte [rbx + r8], r13b
mov r9d, r12d
lea rbx, [0x140319520]
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rax, [rbp + 0x13f8]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r14
cmp qword [rdi + 0x20], r13
jne 0x14000edc7
cmp dword [rbp + 0x13f8], 2
jl 0x14000ea62
mov rcx, qword [r14 + 8]
lea r8, [0x1402757cc]
mov r9d, 3
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.1400a910c
test eax, eax
jne 0x14000edc7
cmp dword [rbp + 0x13f8], 2
jl 0x14000ea62
mov rcx, qword [r14 + 8]
lea r9d, [rax + 4]
lea r8, str..zip
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.1400a910c
test eax, eax
jne 0x14000edc7
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000e6b0]
call fcn.1400a0488
mov rcx, qword [rdi]
call fcn.1400a3d48
mov qword [rdi], r13
cmp qword [rdi + 0x48], r13
je 0x14000ede9
cmp dword [rdi + 0xbe0], r13d
je 0x14000edab
cmp dword [rdi + 0xdc0], r13d
jne 0x14000ec8a
call fcn.140091514
mov rbx, qword [rdi + 0x48]
mov rcx, rax
mov r15, rax
call fcn.140020574
mov r8, r15
lea rdx, [0x1400981c0]
mov rcx, rbx
call fcn.1400ae3dc
mov edx, r12d
mov rcx, r15
call fcn.14001ec9c
test rax, rax
je 0x14000ec6c
mov edx, r12d
mov rcx, r15
call fcn.14001cb60
lea r8, [rsp + 0x40]
mov edx, r12d
mov rcx, r15
call fcn.14001e834
mov rbx, qword [rsp + 0x40]
mov r12, rax
movabs rax, 0xaaaaaaaaaaaaaaab
lea rcx, [rbx*4 + 4]
mul rcx
mov ecx, 0xfffffffa
lea rax, [rbx + 1]
mov rsi, rdx
shr rsi, 1
sub rcx, rsi
cmp rax, rcx
jae 0x14000eb81
mov eax, 0xfffffffe
lea rdx, [rsi + 5]
sub rax, rbx
cmp rdx, rax
jae 0x14000eb81
lea rax, [rbx + 6]
mov ecx, 0xffffffe7
add rax, rsi
cmp rax, rcx
jae 0x14000eb81
test rdx, rdx
je 0x14000eb64
lea rax, [rbx + 0x1e]
add rax, rsi
cmp rax, rcx
jae 0x14000eb81
cmp r13, rdx
lea rcx, [rsi + 0x1e]
sbb rax, rax
and eax, 0x18
add rcx, rax
add rcx, rbx
call fcn.1401ed1fc
mov rcx, rax
jmp 0x14000eb84
mov rcx, r13
lea eax, [rsi + 5]
xor r9d, r9d
movsxd r8, eax
lea eax, [rbx + 1]
movsxd rdx, eax
call fcn.14009fb24
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000ebae
mov rax, qword [rax - 0x18]
add rax, 0x18
add rax, rsi
jmp 0x14000ebb1
mov rax, r13
mov qword [rsp + 0x40], rax
lea r14, [rbx + 1]
test rbx, rbx
je 0x14000ec0d
test r12, r12
je 0x14000ebd9
cmp r14, rbx
jb 0x14000ebd9
mov r8, rbx
mov rdx, r12
mov rcx, rsi
call fcn.140210d80
jmp 0x14000ec0d
mov r8, r14
xor edx, edx
mov rcx, rsi
call fcn.140211420
test r12, r12
jne 0x14000ebf8
call fcn.1401ebba4
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x14000ec08
cmp r14, rbx
jae 0x14000ec0d
call fcn.1401ebba4
mov dword [rax], 0x22
call fcn.1401eac1c
mov rcx, r15
call fcn.140069dac
mov rcx, rsi
cmp rbx, 0x7fffffff
jbe 0x14000ec3f
call fcn.14009fc04
mov rsi, r13
cmp dword [rdi + 0xbec], r13d
je 0x14000edab
lea rcx, str._Service_Parameters___ERROR
jmp 0x14000ec80
lea r8, [rsp + 0x40]
mov edx, ebx
call fcn.1400a765c
cmp dword [rdi + 0xbec], r13d
je 0x14000edab
mov rdx, rsi
lea rcx, str._Service_Parameters____s
call fcn.1400aa468
jmp 0x14000edab
cmp dword [rdi + 0xbec], r13d
je 0x14000edab
lea rcx, str._Service_Parameters___NONE
call fcn.1400aa468
jmp 0x14000edab
mov rbx, qword [rdi + 0xdd8]
lea rdx, str.meshagent
mov rcx, rbx
call fcn.1401f8a70
test eax, eax
je 0x14000edab
mov r9, qword [rbx - 0x18]
movabs rsi, 0xaaaaaaaaaaaaaaab
mov rax, rsi
lea r8, [r9 + 0x1e]
lea rcx, [r8*4]
mul rcx
mov ecx, 0xfffffffa
shr rdx, 1
sub rcx, rdx
cmp r8, rcx
jae 0x14000ed29
mov eax, 0xffffffe1
lea r8, [rdx + 5]
sub rax, r9
cmp r8, rax
jae 0x14000ed29
lea rax, [r9 + 0x23]
mov ecx, 0xffffffe7
add rax, rdx
cmp rax, rcx
jae 0x14000ed29
test r8, r8
je 0x14000ed0b
lea rax, [r9 + 0x3b]
add rax, rdx
cmp rax, rcx
jae 0x14000ed29
mov ecx, gethostname
test r8, r8
lea eax, [rcx + 0x18]
cmovne ecx, eax
add rcx, r8
add rcx, r9
call fcn.1401ed1fc
mov r10, rax
jmp 0x14000ed2c
mov r10, r13
mov r9, qword [rdi + 0xdd8]
mov rax, qword [r9 - 0x18]
lea rcx, [rax*4 + 0x78]
mov rax, rsi
mul rcx
mov eax, dword [r9 - 0x18]
mov rcx, r10
shr rdx, 1
add eax, 0x1e
add rdx, 5
xor r9d, r9d
movsxd r8, edx
movsxd rdx, eax
call fcn.14009fb24
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000ed7a
mov rcx, qword [rax - 0x18]
add rcx, 0x18
add rcx, rax
jmp 0x14000ed7d
mov rcx, r13
mov r9, qword [rdi + 0xdd8]
lea r8, str.____meshServiceName__s___
mov rdx, qword [rax - 0x18]
mov qword [rsp + 0x40], rcx
mov rcx, rsi
call fcn.140001114
mov edx, eax
lea r8, [rsp + 0x40]
mov rcx, rsi
call fcn.1400a765c
mov rcx, qword [rdi + 0x48]
call fcn.1400af000
mov qword [rdi + 0x48], r13
test rsi, rsi
je 0x14000ede9
mov rcx, rsi
call fcn.14009fc04
jmp 0x14000ede9
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000e698]
call fcn.1400a0488
mov rcx, qword [rdi]
call fcn.1400a3d48
mov qword [rdi], r13
mov eax, dword [0x1403175bc]
dec eax
mov dword [0x1403175bc], eax
test eax, eax
jg 0x14000ee00
call fcn.1400e8650
mov rcx, qword [0x140317f50]
test rcx, rcx
je 0x14000ee11
call fcn.1401ebcd0
xor eax, eax
mov rcx, qword [rbp + 0x13a0]
xor rcx, rsp
call fcn.1401dbdb0
mov rbx, qword [rsp + 0x14f0]
add rsp, 0x14b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401dbed8
int3