Function at 0x406d40
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xcc]
sub esp, 0x14c
mov eax, dword [0x6019e4]
xor eax, ebp
mov dword [ebp + 0xc8], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
mov eax, edx
mov dword [ebp - 0x7c], esi
push edi
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], ebx
cmp dword [esi + 0x24], ebx
jne 0x406e0c
mov ecx, dword [esi + 0x1c]
mov edx, 0x6043c0
call fcn.004035f0
mov ecx, eax
call fcn.004b7970
mov dword [esi + 0x24], eax
mov eax, dword [ebp - 0x78]
cmp dword [esi + 0x24], ebx
jne 0x406e0c
mov dword [0x62c424], eax
mov eax, dword [ebp + 0xd4]
mov dword [0x62c428], eax
mov eax, dword [ebp + 0xd8]
mov dword [0x62c420], esi
mov dword [0x62c42c], eax
mov eax, dword [esi + 0x6fc]
cmp eax, 0xa
je 0x406df8
inc eax
push eax
push str.Unable_to_open_database___d_10_..._r_n
call fcn.004010e0
mov ecx, dword [esi]
mov edx, 0x62c420
inc dword [esi + 0x6fc]
push ebx
push 0x406b30
mov ecx, dword [ecx + 0x2e4]
push 0x7d0
call fcn.004b2bf0
add esp, 0x14
jmp 0x407b38
push str.Unable_to_open_database._r_n
call fcn.004010e0
add esp, 4
xor eax, eax
jmp 0x407b3d
mov edx, dword [esi]
call fcn.004ba9f0
mov dword [esi + 0x20], eax
lea eax, [ebp - 0x6c]
push eax
push 0xf003f
push 0
push 0x604408
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x74], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, 1
test eax, eax
jne 0x406e7d
lea eax, [ebp - 0x74]
push eax
push 0
push 0
push 0
push 0x604428
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x406e74
cmp dword [ebp - 0x74], ebx
jbe 0x406e74
push 0x604434
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
cmove ebx, edi
mov dword [ebp - 0x68], ebx
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 0
push 0
push dword [esi + 0x1c]
push 0
push 0
push dword [esi]
push 0
call fcn.0049d970
xor edx, edx
mov ecx, eax
call fcn.0049d9e0
push 0xe88
push 0
mov edx, str._function__getMac____var_ret____var_ni__require_os_.networkInterfaces____for__var_f_in_ni___for__var_i_in_ni_f____if_ni_f__i_.type__ethernet__ni_f__i_.type__wireless__ret______ni_f__i_.mac________return_ret_______
mov dword [ebp - 0x70], eax
mov ecx, eax
call fcn.0040f460
add esp, 0x28
test eax, eax
jne 0x406f63
mov edi, dword [ebp - 0x70]
mov ecx, edi
call fcn.00414550
push 0
xor edx, edx
mov ecx, edi
call fcn.0040e880
add esp, 4
test eax, eax
jne 0x406f63
mov eax, dword [edi + 0x44]
mov ecx, dword [edi + 0x40]
sub eax, ecx
sar eax, 3
lea edx, [eax - 1]
cmp edx, eax
jae 0x406ef6
lea eax, [ecx + edx*8]
test eax, eax
jne 0x406efb
mov eax, 0x5ee574
mov ecx, 0xfff8
cmp word [eax + 6], cx
jne 0x406f63
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x406f63
mov ebx, dword [eax + 0x14]
lea edi, [eax + 0x1c]
mov dword [ebp - 0x80], ebx
cmp ebx, 0x13
jb 0x406f60
push 0x400
push 0x604538
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x60454c
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x14
mov dword [ebp - 0x6c], eax
test eax, eax
jne 0x406ffb
mov ecx, dword [esi + 0x24]
mov edx, 0x604560
push ebx
push edi
push 0x11
call fcn.004b7b00
add esp, 0xc
mov ebx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x406f72
mov ecx, dword [eax + 0x2c]
call fcn.00430440
cmp ebx, 1
je 0x406f82
mov ecx, esi
call fcn.00403ab0
test eax, eax
je 0x406f9a
mov ecx, esi
call fcn.00403760
test eax, eax
je 0x406f9a
push str.Certificate_error_r_n
call fcn.004010e0
add esp, 4
mov ecx, esi
call fcn.00403d70
test eax, eax
je 0x406fb2
push str.Certificate_validation_error_r_n
call fcn.004010e0
add esp, 4
push ecx
mov ecx, dword [esi + 0x1c]
mov edx, str..tag
mov dword [ebp - 0x70], 0
call fcn.004035f0
lea edx, [ebp - 0x70]
mov ecx, eax
call fcn.004ad400
mov edi, dword [ebp - 0x70]
mov ecx, dword [esi + 0x24]
test edi, edi
je 0x4070e9
push eax
push edi
push 3
mov edx, 0x604614
call fcn.004b7b00
push edi
call fcn.0058c812
add esp, 0x10
jmp 0x4070f8
xor edi, edi
test ebx, ebx
jle 0x406f60
mov eax, dword [ebp - 0x74]
push 0x13
add eax, 0x1c
add eax, edi
push 0x604574
push eax
call fcn.0058c240
add esp, 0xc
test eax, eax
jne 0x40702d
add edi, 0x13
cmp edi, ebx
jl 0x407005
jmp 0x406f60
cmp edi, ebx
jge 0x406f60
mov edi, dword [ebp - 0x6c]
xor ebx, ebx
lea eax, [edi + 0x24]
call fcn.00585a60
mov ecx, esp
mov edx, edi
push 1
push 4
call fcn.004aec40
mov edi, eax
push 0x400
push 0x604588
lea eax, [edi + 4]
mov dword [edi], eax
call fcn.0058d536
push dword [ebp - 0x6c]
mov ecx, dword [esi + 0x24]
mov edx, 0x60459c
push edi
push eax
call fcn.004b7ca0
add esp, 0x1c
cmp dword [ebp - 0x6c], ebx
jle 0x4070c3
nop
push 0x13
push str._00:00:00:00:00:00_
push edi
call fcn.0058c240
add esp, 0xc
test eax, eax
je 0x4070ad
mov edx, dword [ebp - 0x80]
push ecx
mov ecx, dword [ebp - 0x74]
push 0x13
push edi
add ecx, 0x1c
call fcn.004b4410
add esp, 0xc
test eax, eax
jns 0x4070ba
add ebx, 0x13
add edi, 0x13
cmp ebx, dword [ebp - 0x6c]
jl 0x407080
jmp 0x4070c3
cmp ebx, dword [ebp - 0x6c]
jl 0x406f60
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x74]
mov edx, str.LocalMacAddresses
mov ecx, dword [esi + 0x24]
add eax, 0x1c
push eax
push 0x11
mov ebx, 1
call fcn.004b7b00
add esp, 0xc
jmp 0x406f63
push 3
mov edx, 0x604618
call fcn.004b7dc0
add esp, 4
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x48]
push 0xff
push eax
push 0xf
mov edx, str.ignoreProxyFile
call fcn.004b7ca0
add esp, 0xc
test eax, eax
jne 0x407164
push ecx
mov ecx, dword [esi + 0x1c]
mov edx, str..proxy
mov dword [ebp - 0x70], eax
call fcn.004035f0
lea edx, [ebp - 0x70]
mov ecx, eax
call fcn.004ad400
mov edi, dword [ebp - 0x70]
mov ecx, dword [esi + 0x24]
test edi, edi
je 0x407155
push eax
push edi
push 8
mov edx, 0x604634
call fcn.004b7b00
push edi
call fcn.0058c812
add esp, 0x10
jmp 0x407164
push 8
mov edx, 0x604640
call fcn.004b7dc0
add esp, 4
mov ecx, dword [esi + 0x1c]
mov edx, str..mshx
call fcn.004035f0
mov edx, eax
mov ecx, esi
call fcn.00406710
test eax, eax
jne 0x4071d5
mov ecx, dword [esi + 0x1c]
mov edx, 0x604654
call fcn.004035f0
mov edx, eax
mov ecx, esi
call fcn.00406710
test eax, eax
jne 0x4071d5
mov edx, str.mesh_linumshx
mov ecx, esi
call fcn.00406710
test eax, eax
jne 0x4071d5
mov edx, str.mesh_limshx
mov ecx, esi
call fcn.00406710
test eax, eax
jne 0x4071d5
mov ecx, esi
call fcn.004065a0
mov ecx, dword [esi + 0x1c]
mov edx, 0x604678
call fcn.004035f0
mov edx, eax
mov ecx, esi
call fcn.00406710
push 0x400
push 0x604680
mov dword [ebp - 0x70], 0
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604694
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x14
cmp eax, 4
jne 0x407237
push 0x400
push 0x6046a8
call fcn.0058d536
push 4
lea ecx, [ebp - 0x70]
mov edx, str.AgentCapabilities
push ecx
mov ecx, dword [esi + 0x24]
push eax
call fcn.004b7ca0
add esp, 0x14
push dword [ebp - 0x70]
call dword [sym.imp.WS2_32.dll_ntohl]
or dword [esi + 0x38], eax
lea eax, [ebp - 0x68]
push eax
push 0x6046d0
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x4075b6
mov dword [ebp - 0x6c], eax
lea ecx, [esi + 0x6b4]
lea eax, [ebp - 0x6c]
mov edx, 0x30
push eax
call fcn.004b28b0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, eax
add esp, 4
test edx, edx
jle 0x4072c8
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x4072c8
xor eax, eax
test edx, edx
jle 0x4072a2
mov cl, byte [eax + edi]
cmp cl, 0x2b
jne 0x407294
mov byte [eax + edi], 0x40
jmp 0x40729d
cmp cl, 0x2f
jne 0x40729d
mov byte [eax + edi], 0x24
inc eax
cmp eax, edx
jl 0x407286
push edx
push edi
push 1
push 0
push 0x6046f0
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push edi
call fcn.0058c812
add esp, 4
mov dword [ebp - 0x6c], 0
jmp 0x4072d2
push 0x6046f8
push dword [ebp - 0x68]
call ebx
lea edi, [esi + 0x5a4]
mov ecx, 0x62c420
test edi, edi
je 0x407313
xor edx, edx
movzx eax, byte [edx + edi]
lea ecx, [ecx + 2]
shr eax, 4
movzx eax, byte [eax + 0x5f10e0]
mov byte [ecx - 2], al
movzx eax, byte [edx + edi]
inc edx
and eax, 0xf
movzx eax, byte [eax + 0x5f10e0]
mov byte [ecx - 1], al
cmp edx, 0x30
jl 0x4072e3
mov byte [ecx], 0
jmp 0x40731a
mov byte [0x62c420], 0
mov ecx, 0x62c420
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407322
sub ecx, edx
push ecx
push 0x62c420
push 1
push 0
push 0x604700
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x400
push 0x60470c
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604714
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jne 0x407375
push 0x60471c
jmp 0x407417
push 0x400
push 0x604724
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x60472c
push 0x10000
push 0x62d420
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jle 0x407412
lea ecx, [ebp - 0x6c]
mov edx, eax
push ecx
mov ecx, 0x62d420
call fcn.004b28b0
mov edx, eax
add esp, 4
test edx, edx
jle 0x40740b
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x40740b
xor eax, eax
test edx, edx
jle 0x4073ec
nop dword [eax]
mov cl, byte [eax + edi]
cmp cl, 0x2b
jne 0x4073de
mov byte [eax + edi], 0x40
jmp 0x4073e7
cmp cl, 0x2f
jne 0x4073e7
mov byte [eax + edi], 0x24
inc eax
cmp eax, edx
jl 0x4073d0
push edx
push edi
push 1
push 0
push 0x604734
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push edi
call fcn.0058c812
add esp, 4
jmp 0x40741c
push 0x60473c
jmp 0x407417
push 0x604744
push dword [ebp - 0x68]
call ebx
push 0x400
push 0x60474c
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604758
push 0x10000
push 0x62d420
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jne 0x40745c
push 0x604764
push dword [ebp - 0x68]
call ebx
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x407487
mov ecx, 0x62d420
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407464
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
sub ecx, edx
push ecx
push 0x62d420
push 1
push 0
push 0x604774
push dword [ebp - 0x68]
call edi
push 0x400
push 0x604784
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604790
push 0x10000
push 0x62d420
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jne 0x4074c1
push 0x60479c
push dword [ebp - 0x68]
call ebx
jmp 0x4074ed
mov ecx, 0x62d420
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4074d0
sub ecx, edx
push ecx
push 0x62d420
push 1
push 0
push 0x6047ac
push dword [ebp - 0x68]
call edi
push 0x400
push 0x6047bc
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, str.WebProxy
push 0x10000
push 0x62d420
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jne 0x407527
push 0x6047d4
push dword [ebp - 0x68]
call ebx
jmp 0x40754d
mov ecx, 0x62d420
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407530
sub ecx, edx
push ecx
push 0x62d420
push 1
push 0
push 0x6047dc
push dword [ebp - 0x68]
call edi
push 0x400
push 0x6047e4
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x6047e8
push 0x10000
push 0x62d420
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jne 0x407587
push 0x6047ec
push dword [ebp - 0x68]
call ebx
jmp 0x4075ad
mov ecx, 0x62d420
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407590
sub ecx, edx
push ecx
push 0x62d420
push 1
push 0
push 0x6047f0
push dword [ebp - 0x68]
call edi
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esi + 0x610], 0
lea edx, [esi + 0x610]
push ecx
mov ecx, dword [esi + 0x20]
jne 0x4075cf
push 0
xor edx, edx
jmp 0x4075d5
push dword [esi + 0x604]
call fcn.004bb800
add esp, 8
cmp dword [ebp + 0xd8], 0
je 0x407662
mov eax, dword [ebp - 0x78]
cmp eax, 1
je 0x407662
cmp eax, 2
jne 0x406e05
mov eax, dword [ebp + 0xd4]
mov edx, 0x6047f4
mov ecx, dword [eax + 4]
mov eax, ecx
mov bl, byte [eax]
cmp bl, byte [edx]
jne 0x407627
test bl, bl
je 0x407623
mov bl, byte [eax + 1]
cmp bl, byte [edx + 1]
jne 0x407627
add eax, 2
add edx, 2
test bl, bl
jne 0x407607
xor eax, eax
jmp 0x40762c
sbb eax, eax
or eax, 1
test eax, eax
je 0x407662
mov eax, 0x6047f8
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407655
test dl, dl
je 0x407651
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407655
add ecx, 2
add eax, 2
test dl, dl
jne 0x407635
xor eax, eax
jmp 0x40765a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x406e05
mov ecx, dword [esi + 0x1c]
mov edx, 0x604800
call fcn.004035f0
test eax, eax
je 0x40767c
push eax
call fcn.00593549
add esp, 4
mov ecx, dword [esi + 0x1c]
mov edx, str..corereset
call fcn.004035f0
mov edi, eax
push 0
push edi
call fcn.005942e7
add esp, 8
test eax, eax
jne 0x4076c7
push 0x400
push 0x604818
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604824
push eax
call fcn.004b7dc0
add esp, 0xc
test edi, edi
je 0x4076c7
push edi
call fcn.00593549
add esp, 4
cmp dword [esi + 0x30], 0
jne 0x4076f5
push 0x400
push 0x604830
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x60483c
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x14
mov ebx, eax
jmp 0x4076f7
xor ebx, ebx
push 0x400
push 0x604848
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, str.webSocketMaskOverride
push 0
push 0
push eax
call fcn.004b7ca0
push 0x400
push 0x604878
mov dword [esi + 0x59c], eax
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604884
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x28
test eax, eax
je 0x407799
push 0x400
push 0x604890
call fcn.0058d536
push 0x10
lea ecx, [ebp + 0xb8]
mov edx, str.jsDebugPort
push ecx
mov ecx, dword [esi + 0x24]
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
jle 0x407799
cmp eax, 0x10
jae 0x407b99
mov byte [ebp + eax + 0xb8], 0
lea eax, [ebp + 0xb8]
push eax
call fcn.0058d50c
add esp, 4
mov dword [esi + 0x5a0], eax
mov eax, dword [esi + 8]
test eax, eax
je 0x407854
push dword [esi]
push eax
call fcn.00402f30
mov ecx, dword [esi + 8]
or edx, 0xffffffff
push 0x6048a8
call fcn.0040fe40
mov ecx, dword [esi + 8]
add esp, 0xc
mov eax, dword [ecx + 0x44]
mov edi, dword [ecx + 0x40]
sub eax, edi
sar eax, 3
lea edx, [eax - 2]
cmp edx, eax
jae 0x407baf
lea edx, [edi + edx*8]
mov dword [ebp - 0x78], edx
lea edx, [eax - 1]
mov dword [ebp - 0x70], edx
cmp edx, eax
jae 0x407b9e
mov edx, dword [ebp - 0x78]
mov eax, dword [edi + eax*8 - 8]
mov esi, dword [ebp - 0x78]
mov ecx, dword [edx]
mov edx, dword [edx + 4]
mov dword [esi], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [edi + eax*8 + 4]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x70]
mov esi, dword [ebp - 0x7c]
mov dword [edi + eax*8 + 4], edx
mov edx, str.Ready
mov dword [edi + eax*8], ecx
mov ecx, dword [esi + 8]
call fcn.00414170
mov ecx, dword [esi + 8]
mov edx, 1
push 0
call fcn.0040e880
add esp, 4
test eax, eax
je 0x40784c
mov eax, dword [esi + 8]
test eax, eax
je 0x40784c
push 0x62b12b
push eax
call fcn.00471950
add esp, 8
mov ecx, dword [esi + 8]
call fcn.00415510
cmp dword [esi + 0x30], 0
jne 0x4079bb
push 0
push 0
push dword [esi + 0x18]
push dword [esi + 0x1c]
push dword [esi + 0x24]
push 0
push dword [esi]
push 0
call fcn.0049d970
xor edx, edx
mov ecx, eax
call fcn.0049d9e0
push esi
mov ecx, eax
mov dword [esi + 8], eax
call fcn.00403530
mov ecx, dword [esi + 8]
mov edx, 0x406ac0
push esi
call fcn.004718b0
add esp, 0x28
test ebx, ebx
jle 0x4079bb
push 0x400
push 0x6048b8
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, str.noUpdateCoreModule
push 0
push 0
push eax
call fcn.004b7ca0
add esp, 0x14
test eax, eax
je 0x40795a
push str._CoreModule:_Update_Disabled_n
mov dword [esi + 0x30], 1
call fcn.004010e0
push ebx
call fcn.0058db11
mov edi, eax
add esp, 8
test edi, edi
jne 0x4078f4
jmp 0x407b5b
push ebx
push 0
push edi
call fcn.00587250
push 0x400
push 0x604904
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604910
push ebx
push edi
push eax
call fcn.004b7ca0
mov ecx, dword [esi + 8]
lea eax, [ebx - 4]
push 0xd
push 0x60491c
push eax
lea edx, [edi + 4]
call fcn.0049e030
add esp, 0x2c
test eax, eax
jne 0x407947
mov ecx, dword [esi + 8]
xor edx, edx
call fcn.0040e7d0
test eax, eax
je 0x40794f
mov ecx, dword [esi + 8]
call fcn.00415510
push edi
call fcn.0058c812
add esp, 4
jmp 0x4079bb
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x7c]
sub esp, 0xc
mov dword [ebp - 0x7c], esi
call fcn.00472440
mov ecx, dword [esi + 8]
mov dword [esi + 0x598], eax
call fcn.00414690
mov edx, dword [esi + 0x598]
mov ecx, dword [esi + 8]
call fcn.00415060
push dword [esi + 0x598]
push 0x60c950
push 0x20
push 0x64d540
call fcn.00401140
mov ecx, dword [esi + 8]
mov edx, 0xfffffffe
push 0x64d540
call fcn.00410110
mov ecx, dword [esi + 8]
add esp, 0x20
call fcn.00415510
mov ecx, dword [esi]
mov edx, 0x406ae0
push esi
call fcn.004adda0
mov ecx, esi
call fcn.004063a0
push 0x400
push 0x60492c
call fcn.0058d536
mov ecx, dword [esi + 0x24]
mov edx, 0x604938
push 0x1000
push 0x62c420
push eax
call fcn.004b7ca0
add esp, 0x18
cmp eax, 5
jle 0x407b38
mov ecx, 0x62c420
mov edx, 0x604944
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x407b38
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x407b38
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movups xmmword [ebp + 0xb8], xmm0
movups xmmword [ebp - 0x64], xmm0
movq qword [ebp - 0x54], xmm0
call fcn.004b49b0
mov edi, dword [sym.imp.WS2_32.dll_htons]
test eax, eax
je 0x407a89
mov eax, 0x17
push 0x425d
mov word [ebp - 0x64], ax
call edi
mov word [ebp - 0x62], ax
mov eax, dword [0x62b164]
test eax, eax
jne 0x407a73
call fcn.004b4b30
mov eax, dword [0x62b164]
cmp eax, 1
jne 0x407a89
lea eax, [ebp - 0x5c]
push eax
push str.FF02:0:0:0:0:0:0:FE
push 0x17
call dword [0x62b170]
mov ebx, 2
push 0x425d
mov word [ebp + 0xb8], bx
call edi
mov word [ebp + 0xba], ax
mov edx, str.239.255.255.235
lea eax, [ebp + 0xbc]
mov ecx, ebx
push eax
call fcn.004b4c00
push esi
push ecx
mov ecx, dword [esi]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0xb8]
push eax
push 0x425e
call fcn.004ae570
add esp, 0x18
mov dword [esi + 0x6e8], eax
test eax, eax
jne 0x407af4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xdb
push 0xf50
mov edx, 0x604970
jmp 0x407b2e
push ecx
push esi
push ecx
mov ecx, dword [esi]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0xb8]
push eax
push 0
call fcn.004ae570
add esp, 0x18
mov dword [esi + 0x6ec], eax
test eax, eax
jne 0x407b38
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xdb
push 0xf54
mov edx, str...meshcore_agentcore.c
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
mov eax, 1
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xc8]
xor ecx, ebp
call fcn.005852a8
lea esp, [ebp + 0xcc]
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x4c4
mov edx, 0x624148
xor ecx, ecx
call fcn.004b4f80
push 0x4c4
push 0x624164
push 0x624180
call fcn.004010e0
add esp, 0x18
push 0xfe
call fcn.005885bd
call fcn.005853dc
push 0xffffffffffffffff
push 0x178
mov edx, 0x605594
call fcn.0040d9d0
push 0xfffffffffffffffe
push 0x178
mov edx, 0x605594
call fcn.0040d9d0
int3