Function at 0x140006534
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x198], rbx
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], rdi
mov rax, qword [0x1402ccee0]
xor rax, rbp
mov qword [rbp + 0x150], rax
movsxd r12, edx
xor r14d, r14d
xor edi, edi
mov dword [rbp + 0x18], r9d
mov qword [rbp + 0x40], r8
mov r15d, r9d
mov dword [rbp + 0x1c], r12d
mov r13, r8
mov rbx, rcx
mov rsi, r12
test edx, edx
jle 0x1400065ee
lea r12d, [r14 + 1]
mov rcx, qword [r13 + rdi*8]
lea rdx, str._recovery
call fcn.1401b7970
test eax, eax
jne 0x1400065b4
or dword [rbx + 0x7c], 0x40
xor r15d, r15d
mov rcx, qword [r13 + rdi*8]
lea rdx, str._nocertstore
call fcn.1401b7970
test eax, eax
jne 0x1400065df
xor r15d, r15d
lea rcx, str._Not_using_Certificate_Store__n
call fcn.140001090
mov dword [rbx + 0x654], r12d
add rdi, r12
cmp rdi, rsi
jl 0x140006598
mov dword [rbp + 0x18], r15d
mov r12d, esi
xor esi, esi
cmp qword [rbx + 0x48], rsi
jne 0x1400066a2
mov rcx, qword [rbx + 0x38]
lea rdx, [0x140231c8c]
call fcn.140002bf4
mov rcx, rax
xor r8d, r8d
call fcn.14008215c
mov qword [rbx + 0x48], rax
cmp rax, rsi
jne 0x1400066a2
mov qword [0x1402cffc0], rbx
mov dword [0x1402cffc8], r12d
mov qword [0x1402cffd0], r13
mov dword [0x1402cffd8], r15d
mov edx, dword [rbx + 0x780]
cmp edx, 0xa
je 0x14000668f
inc edx
lea rcx, str.Unable_to_open_database___d_10_..._r_n
call fcn.140001090
mov rcx, qword [rbx]
lea edi, [rsi + 1]
add dword [rbx + 0x780], edi
lea r9, [0x1400063c8]
mov r8d, 0x7d0
mov qword [rsp + 0x20], rsi
lea rdx, [0x1402cffc0]
mov rcx, qword [rcx + 0x4f8]
call fcn.14007d3b4
mov eax, edi
jmp 0x1400075c5
lea rcx, str.Unable_to_open_database._r_n
call fcn.140001090
xor eax, eax
jmp 0x1400075c5
mov rdx, qword [rbx]
call fcn.140085294
mov qword [rbx + 0x40], rax
lea rdx, [0x140231cd8]
lea rax, [rbp + 8]
mov dword [rbp + 0x10], esi
mov r9d, 0xf003f
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14000672f
mov rcx, qword [rbp + 8]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rdx, str.ResetNodeId
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140006725
cmp dword [rbp + 0x10], esi
jbe 0x140006725
mov rcx, qword [rbp + 8]
lea rdx, str.ResetNodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
mov eax, 1
cmove r14d, eax
mov rcx, qword [rbp + 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.14006cffc
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x38]
xor r8d, r8d
mov qword [rsp + 0x48], rsi
xor edx, edx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.14006d084
mov r9d, 0xf88
mov qword [rbp + 0x10], rax
lea rdx, str.require_linux_pathfix____
mov rcx, rax
mov r13, rax
call fcn.14000ed74
mov r9d, 0xe88
lea rdx, str._function__getMac____var_ret____var_ni__require_os_.networkInterfaces____for__var_f_in_ni___for__var_i_in_ni_f____if_ni_f__i_.type__ethernet__ni_f__i_.type__wireless__ret______ni_f__i_.mac________return_ret_______
mov rcx, r13
call fcn.14000ed74
test eax, eax
jne 0x140006804
lea r8, [rbp + 8]
or edx, 0xffffffff
mov rcx, r13
call fcn.140010848
mov rdi, qword [rbp + 8]
mov r12, rax
cmp rdi, 0x13
jb 0x140006804
mov edx, 0x400
lea rcx, str.LocalMacAddresses
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
xor r9d, r9d
mov dword [rsp + 0x20], esi
mov r8d, eax
call fcn.1400823b4
movsxd r15, eax
test eax, eax
jne 0x140006839
mov rcx, qword [rbx + 0x48]
lea r8d, [rax + 0x11]
mov r9, r12
mov dword [rsp + 0x20], edi
lea rdx, str.LocalMacAddresses
call fcn.140082240
mov r15d, 1
test r13, r13
je 0x140006818
mov rcx, qword [r13 + 0x40]
call fcn.140024368
cmp r14d, r15d
je 0x14000695d
mov rcx, rbx
call fcn.140003060
xor r13d, r13d
test eax, eax
je 0x140006978
jmp 0x140006960
test edi, edi
jle 0x140006804
movsxd rcx, esi
lea rdx, str._00:00:00:00:00:00_
add rcx, r12
mov r8d, reloc.WS2_32.dll_send
call fcn.1401ac9a0
test eax, eax
jne 0x140006860
add esi, 0x13
cmp esi, edi
jl 0x14000683d
cmp esi, edi
jge 0x140006804
lea rax, [r15 + 0x38]
xor esi, esi
lea rcx, [rax + 0xf]
mov rdx, r15
cmp rcx, rax
ja 0x140006880
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1401a62f0
sub rsp, rcx
mov r9d, 1
lea rcx, [rsp + 0x50]
lea r8d, [r9 + 7]
call fcn.140079034
mov edx, 0x400
mov qword [rbp + 8], rax
lea rcx, [rax + 8]
mov qword [rax], rcx
lea rcx, str.LocalMacAddresses
call fcn.1401ade00
mov r9, qword [rbp + 8]
lea rdx, str.LocalMacAddresses
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov dword [rsp + 0x20], r15d
call fcn.1400823b4
test r15d, r15d
jle 0x140006934
mov r13, qword [rbp + 8]
movsxd rax, esi
lea rdx, str._00:00:00:00:00:00_
add rax, r13
mov r8d, reloc.WS2_32.dll_send
mov rcx, rax
mov qword [rbp + 8], rax
call fcn.1401ac9a0
test eax, eax
je 0x14000691f
mov r8, qword [rbp + 8]
mov r9d, reloc.WS2_32.dll_send
mov edx, edi
mov rcx, r12
call fcn.14007e788
test eax, eax
jns 0x140006927
add esi, 0x13
cmp esi, r15d
jl 0x1400068e4
mov r13, qword [rbp + 0x10]
cmp esi, r15d
jl 0x140006804
mov rcx, qword [rbx + 0x48]
lea rdx, str.LocalMacAddresses
mov r15d, 1
mov dword [rsp + 0x20], edi
mov r9, r12
mov r14d, r15d
lea r8d, [r15 + 0x10]
call fcn.140082240
jmp 0x14000680a
xor r13d, r13d
mov rcx, rbx
call fcn.140002d88
test eax, eax
je 0x140006978
lea rcx, str.Certificate_error_r_n
call fcn.140001090
mov rcx, rbx
call fcn.140003360
test eax, eax
je 0x140006990
lea rcx, str.Certificate_validation_error_r_n
call fcn.140001090
mov rcx, qword [rbx + 0x38]
lea rdx, str..tag
mov qword [rbp + 8], r13
call fcn.140002bf4
mov rcx, rax
lea rdx, [rbp + 8]
call fcn.14007773c
mov rdi, qword [rbp + 8]
lea r14, [0x1402311c4]
mov rcx, qword [rbx + 0x48]
mov r8d, 3
mov rdx, r14
test rdi, rdi
je 0x1400069e3
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.140082240
mov rcx, rdi
call fcn.1401ad038
jmp 0x1400069e8
call fcn.1400824ec
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x50]
mov r8d, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x20], 0xff
lea rdx, str.ignoreProxyFile
call fcn.1400823b4
test eax, eax
jne 0x140006a67
mov rcx, qword [rbx + 0x38]
lea rdx, str..proxy
mov qword [rbp + 8], r13
call fcn.140002bf4
mov rcx, rax
lea rdx, [rbp + 8]
call fcn.14007773c
mov rdi, qword [rbp + 8]
test rdi, rdi
je 0x140006a67
mov rcx, qword [rbx + 0x48]
mov r8d, 8
lea rdx, str.WebProxy
test eax, eax
jle 0x140006a5a
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.140082240
jmp 0x140006a5f
call fcn.1400824ec
mov rcx, rdi
call fcn.1401ad038
mov rcx, qword [rbx + 0x38]
lea rdx, str..mshx
call fcn.140002bf4
mov rdx, rax
mov rcx, rbx
call fcn.140005e84
test eax, eax
jne 0x140006aee
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002bf4
mov rdx, rax
mov rcx, rbx
call fcn.140005e84
test eax, eax
jne 0x140006aee
lea rdx, str.mesh_linumshx
mov rcx, rbx
call fcn.140005e84
test eax, eax
jne 0x140006aee
lea rdx, str.mesh_limshx
mov rcx, rbx
call fcn.140005e84
test eax, eax
jne 0x140006aee
mov rcx, rbx
call fcn.140005cc8
mov rcx, qword [rbx + 0x38]
lea rdx, str..msh
call fcn.140002bf4
mov rdx, rax
mov rcx, rbx
call fcn.140005e84
mov esi, 0x400
mov dword [rbp + 0x10], r13d
lea rdi, str.AgentCapabilities
mov edx, esi
mov rcx, rdi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rdi
call fcn.1400823b4
cmp eax, 4
jne 0x140006b55
mov edx, esi
mov rcx, rdi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x10]
mov r8d, eax
mov dword [rsp + 0x20], 4
mov rdx, rdi
call fcn.1400823b4
mov ecx, dword [rbp + 0x10]
call qword [sym.imp.WS2_32.dll_ntohl]
or dword [rbx + 0x7c], eax
mov eax, dword [rbx + 0x784]
lea r8, [rbp]
neg eax
lea rdx, [0x140231cd8]
sbb rcx, rcx
add rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
lea r12, [0x1402cffc0]
test eax, eax
jne 0x140007054
test byte [rbx + 0x7c], 0x40
lea r15, [rbx + 0x728]
lea esi, [rax + 0x30]
mov qword [rbp + 0x10], r13
mov rcx, r15
lea r8, [rbp + 0x10]
mov edx, esi
jne 0x140006f3c
call fcn.14007d0a8
movsxd rdx, eax
test eax, eax
jle 0x140006c13
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006c13
lea r8d, [rsi - 0x2f]
mov rcx, rdx
test eax, eax
jle 0x140006be5
mov rax, rdi
cmp byte [rax], 0x2b
jne 0x140006bd5
mov byte [rax], 0x40
jmp 0x140006bdd
cmp byte [rax], 0x2f
jne 0x140006bdd
mov byte [rax], 0x24
add rax, r8
sub rcx, r8
jne 0x140006bcb
mov rcx, qword [rbp]
mov r9d, r8d
mov dword [rsp + 0x28], edx
xor r8d, r8d
lea rdx, str.NodeId
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.1401ad038
mov qword [rbp + 0x10], r13
jmp 0x140006c24
mov rcx, qword [rbp]
lea rdx, str.NodeId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
lea rcx, [rbx + 0x5f4]
mov r8, r12
mov edx, esi
call fcn.140077538
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], r13b
jne 0x140006c39
mov rcx, qword [rbp]
lea rdx, str.AgentHash
mov dword [rsp + 0x28], eax
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.MeshID
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshID
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.1400823b4
lea rdi, [0x1402d0fc0]
test eax, eax
je 0x140006d42
mov edx, 0x400
lea rcx, str.MeshID
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshID
mov r9, rdi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
call fcn.1400823b4
test eax, eax
jle 0x140006d42
lea r8, [rbp + 0x10]
mov edx, eax
mov rcx, rdi
call fcn.14007d0a8
test eax, eax
jle 0x140006d42
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006d42
movsxd rdx, eax
mov r8d, 1
test eax, eax
jle 0x140006d18
mov rcx, rdi
cmp byte [rcx], 0x2b
jne 0x140006d08
mov byte [rcx], 0x40
jmp 0x140006d10
cmp byte [rcx], 0x2f
jne 0x140006d10
mov byte [rcx], 0x24
add rcx, r8
sub rdx, r8
jne 0x140006cfe
mov rcx, qword [rbp]
lea rdx, str.MeshId
mov r9d, r8d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.1401ad038
jmp 0x140006d53
mov rcx, qword [rbp]
lea rdx, str.MeshId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdi, [0x1402d0fc0]
mov r9, rdi
mov dword [rsp + 0x20], 0x10000
mov r8d, eax
lea rdx, str.MeshServer
call fcn.1400823b4
test eax, eax
jne 0x140006da5
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edi, 1
jmp 0x140006dd7
or rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], r13b
jne 0x140006da9
mov rcx, qword [rbp]
lea rdx, str.MeshServerUrl
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
mov edi, 1
mov r9d, edi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.ServerID
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea r9, [0x1402d0fc0]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
lea rdx, str.ServerID
call fcn.1400823b4
test eax, eax
jne 0x140006e21
mov rcx, qword [rbp]
lea rdx, str.MeshServerId
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006e55
or rax, 0xffffffffffffffff
lea rcx, [0x1402d0fc0]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006e2c
mov dword [rsp + 0x28], eax
lea rdx, str.MeshServerId
mov qword [rsp + 0x20], rcx
mov r9d, edi
mov rcx, qword [rbp]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
lea rcx, str.WebProxy
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea r9, [0x1402d0fc0]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
lea rdx, str.WebProxy
call fcn.1400823b4
test eax, eax
jne 0x140006e9f
mov rcx, qword [rbp]
lea rdx, str.Proxy
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x140006ed3
or rax, 0xffffffffffffffff
lea rcx, [0x1402d0fc0]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006eaa
mov dword [rsp + 0x28], eax
lea rdx, str.Proxy
mov qword [rsp + 0x20], rcx
mov r9d, edi
mov rcx, qword [rbp]
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, 0x400
mov rcx, r14
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea r9, [0x1402d0fc0]
mov r8d, eax
mov dword [rsp + 0x20], 0x10000
mov rdx, r14
call fcn.1400823b4
test eax, eax
jne 0x140006f0a
mov rdx, r14
jmp 0x140006fa9
or rax, 0xffffffffffffffff
lea rcx, [0x1402d0fc0]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140006f15
mov dword [rsp + 0x28], eax
mov r9d, edi
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, qword [rbp]
mov rdx, r14
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x140006fb3
call fcn.14007d0a8
test eax, eax
jle 0x140006fa2
mov rdi, qword [rbp + 0x10]
test rdi, rdi
je 0x140006fa2
movsxd rdx, eax
mov r8d, 1
test eax, eax
jle 0x140006f78
mov rcx, rdi
cmp byte [rcx], 0x2b
jne 0x140006f68
mov byte [rcx], 0x40
jmp 0x140006f70
cmp byte [rcx], 0x2f
jne 0x140006f70
mov byte [rcx], 0x24
add rcx, r8
sub rdx, r8
jne 0x140006f5e
mov rcx, qword [rbp]
lea rdx, str.DiagnosticAgentNodeId
mov r9d, r8d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, rdi
call fcn.1401ad038
jmp 0x140006fb3
lea rdx, str.DiagnosticAgentNodeId
mov rcx, qword [rbp]
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edi, 0x400
lea rcx, str.SelfNodeCert
mov edx, edi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.SelfNodeCert
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.1400823b4
test eax, eax
jne 0x14000703f
mov edx, edi
lea rdi, str.NodeID
mov rcx, rdi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
mov r9, r12
mov r8d, eax
mov dword [rsp + 0x20], 0x1000
mov rdx, rdi
call fcn.1400823b4
cmp eax, esi
jne 0x140007026
mov r8, rsi
mov rdx, r12
mov rcx, r15
call fcn.1401a71d0
test eax, eax
je 0x14000703f
mov rcx, qword [rbx + 0x48]
mov r9, r15
mov r8d, 6
mov dword [rsp + 0x20], esi
mov rdx, rdi
call fcn.140082240
mov rcx, qword [rbp]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, 0x400
mov r15d, 1
mov rcx, qword [rbx + 0x40]
lea rdx, [rbx + 0x678]
cmp qword [rdx], r13
jne 0x14000706b
xor r8d, r8d
xor edx, edx
jmp 0x140007072
mov r8, qword [rbx + 0x660]
call fcn.140085eac
mov ecx, 2
cmp dword [rbp + 0x18], r13d
je 0x1400070c2
mov eax, dword [rbp + 0x1c]
cmp eax, r15d
je 0x1400070c2
cmp eax, ecx
jne 0x14000669b
mov rdi, qword [rbp + 0x40]
lea rdx, [0x140231f48]
mov rcx, qword [rdi + 8]
call fcn.1401b7970
test eax, eax
je 0x1400070c2
mov rcx, qword [rdi + 8]
lea rdx, str.connect
call fcn.1401b7970
test eax, eax
jne 0x14000669b
mov rcx, qword [rbx + 0x38]
lea rdx, str..update.exe
call fcn.140002bf4
test rax, rax
je 0x1400070df
mov rcx, rax
call fcn.1401b4cc8
mov rcx, qword [rbx + 0x38]
lea rdx, str..corereset
call fcn.140002bf4
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.1401b6410
lea r14, str.CoreModule
test eax, eax
jne 0x14000712e
mov rdx, rsi
mov rcx, r14
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
mov r8d, eax
mov rdx, r14
call fcn.1400824ec
test rdi, rdi
je 0x14000712e
mov rcx, rdi
call fcn.1401b4cc8
cmp dword [rbx + 0x70], r13d
jne 0x14000715a
mov rdx, rsi
mov rcx, r14
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, r14
call fcn.1400823b4
mov edi, eax
jmp 0x14000715d
mov edi, r13d
mov rdx, rsi
lea rcx, str.webSocketMaskOverride
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.webSocketMaskOverride
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.1400823b4
mov rdx, rsi
mov dword [rbx + 0x5e8], eax
lea rsi, str.jsDebugPort
mov rcx, rsi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
xor r9d, r9d
mov r8d, eax
mov dword [rsp + 0x20], r13d
mov rdx, rsi
call fcn.1400823b4
test eax, eax
je 0x140007206
mov edx, 0x400
mov rcx, rsi
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea r9, [rbp + 0x40]
mov r8d, eax
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov rdx, rsi
call fcn.1400823b4
test eax, eax
jle 0x140007206
cdqe
cmp rax, 0x10
jae 0x1400075fa
lea rcx, [rbp + 0x40]
mov byte [rbp + rax + 0x40], r13b
call fcn.1401addd4
mov dword [rbx + 0x5ec], eax
mov rcx, qword [rbx + 0x10]
mov esi, 0xfffffffe
mov dword [rbx + 0x74], r15d
test rcx, rcx
je 0x140007280
mov rdx, qword [rbx]
call fcn.1400025c0
mov rcx, qword [rbx + 0x10]
lea r8, str.emit
or edx, 0xffffffff
call fcn.14000f4ac
mov rcx, qword [rbx + 0x10]
or r8d, 0xffffffff
mov edx, esi
call fcn.1400104a0
mov rcx, qword [rbx + 0x10]
lea rdx, str.Ready
call fcn.140011fd4
mov rcx, qword [rbx + 0x10]
mov edx, r15d
call fcn.14000e28c
test eax, eax
je 0x140007277
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140007277
lea rdx, [0x140230378]
call fcn.140051748
mov rcx, qword [rbx + 0x10]
call fcn.140012e00
cmp dword [rbx + 0x70], r13d
jne 0x140007450
call fcn.14006cffc
mov r9, qword [rbx]
mov rcx, rax
mov rax, qword [rbx + 0x30]
xor r8d, r8d
mov qword [rsp + 0x48], r13
xor edx, edx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x38]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.14006d084
mov r8, rbx
mov qword [rbx + 0x10], rax
mov rcx, rax
call fcn.140002b78
mov rcx, qword [rbx + 0x10]
lea rdx, [0x140006368]
mov r8, rbx
call fcn.1400516c4
mov edx, 0x400
lea rcx, str.coreDumpEnabled
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.coreDumpEnabled
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.1400823b4
mov dword [rbx + 0x5f0], eax
test eax, eax
je 0x140007337
mov rcx, qword [rbx + 0x10]
lea rdx, str.process.coreDumpLocation__process.platformwin32__process.execPath.replace_.exe__.dmp__:_process.execPath__.dmp__
mov r9d, 0xf08
call fcn.14000ed74
test edi, edi
jle 0x140007450
mov edx, 0x400
lea rcx, str.noUpdateCoreModule
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.noUpdateCoreModule
xor r9d, r9d
mov dword [rsp + 0x20], r13d
mov r8d, eax
call fcn.1400823b4
test eax, eax
je 0x1400073fc
lea rcx, str._CoreModule:_Update_Disabled_n
mov dword [rbx + 0x70], r15d
call fcn.140001090
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, edi
call fcn.1400791e8
mov edx, 0x400
mov rcx, r14
mov rsi, rax
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
mov r9, rsi
mov r8d, eax
mov dword [rsp + 0x20], edi
mov rdx, r14
call fcn.1400823b4
mov rcx, qword [rbx + 0x10]
lea r8d, [rdi - 4]
lea rdx, [rsi + 4]
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.CoreModule.js
call fcn.14006d72c
test eax, eax
jne 0x1400073e9
mov rcx, qword [rbx + 0x10]
call fcn.14006d7f0
test eax, eax
je 0x1400073f2
mov rcx, qword [rbx + 0x10]
call fcn.140012e00
mov rcx, rsi
call fcn.1401ad038
jmp 0x140007450
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp + 0x40]
mov qword [rbp + 0x40], rbx
call fcn.140051dd4
mov rcx, qword [rbx + 0x10]
mov qword [rbx + 0x5e0], rax
call fcn.140012288
mov rdx, qword [rbx + 0x5e0]
mov rcx, qword [rbx + 0x10]
call fcn.140012b8c
mov rcx, qword [rbx + 0x5e0]
call fcn.140050f2c
mov rcx, qword [rbx + 0x10]
mov r8, rax
mov edx, esi
call fcn.14000f660
mov rcx, qword [rbx + 0x10]
call fcn.140012e00
mov rcx, qword [rbx]
lea rdx, [0x140006374]
mov r8, rbx
call fcn.1400780c4
mov rcx, rbx
call fcn.140005a88
mov edx, 0x400
lea rcx, str.MeshServer
call fcn.1401ade00
mov rcx, qword [rbx + 0x48]
lea rdx, str.MeshServer
mov r9, r12
mov dword [rsp + 0x20], 0x1000
mov r8d, eax
call fcn.1400823b4
cmp eax, 5
jle 0x1400075c2
mov eax, dword [0x1402cffc0]
cmp eax, dword [str.local]
jne 0x1400075c2
mov al, byte [0x1402cffc4]
cmp al, byte [0x1402318b8]
jne 0x1400075c2
xor eax, eax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x38], eax
call fcn.14007edb8
mov esi, 0x425d
test eax, eax
je 0x140007514
mov edi, reloc.WS2_32.dll_socket
mov ecx, esi
mov word [rbp + 0x20], di
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x28]
mov ecx, edi
lea rdx, str.FF02:0:0:0:0:0:0:FE
mov word [rbp + 0x22], ax
call fcn.14007f00c
mov edi, 2
mov ecx, esi
mov word [rbp + 0x40], di
call qword [sym.imp.WS2_32.dll_htons]
lea r8, [rbp + 0x44]
mov ecx, edi
lea rdx, str.239.255.255.235
mov word [rbp + 0x42], ax
call fcn.14007f00c
mov rcx, qword [rbx]
lea rax, [rbp + 0x20]
mov r8d, 0x425e
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.1400788a8
mov qword [rbx + 0x760], rax
test rax, rax
jne 0x140007575
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0x10fe
jmp 0x1400075aa
mov rcx, qword [rbx]
lea rax, [rbp + 0x20]
xor r8d, r8d
mov qword [rsp + 0x30], rbx
lea r9, [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.1400788a8
mov qword [rbx + 0x768], rax
test rax, rax
jne 0x1400075c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, 0x1102
mov r9d, 0xdb
mov dword [rsp + 0x20], eax
lea rdx, str...meshcore_agentcore.c
xor ecx, ecx
call fcn.14007f3d4
mov eax, r15d
mov rcx, qword [rbp + 0x150]
xor rcx, rbp
call fcn.1401a5d00
mov rbx, qword [rbp + 0x198]
mov rsi, qword [rbp + 0x1a0]
mov rdi, qword [rbp + 0x1a8]
lea rsp, [rbp + 0x160]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401a5e2c
int3