Function at 0x14000be98
Capabilities:
Set current directory

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13b0]
mov eax, 0x14b0
call fcn.1401c3ba0
sub rsp, rax
mov rax, qword [0x1402bdf00]
xor rax, rsp
mov qword [rbp + 0x13a0], rax
mov rdi, qword [0x1402c1650]
lea rcx, [rsp + 0x60]
xor r13d, r13d
mov r14, r8
mov edx, 0x400
mov esi, r13d
lea r9d, [r13 + 1]
lea r8d, [r13 + 8]
call fcn.140090854
mov rbx, rax
cmp qword [rax - 0x10], r13
jbe 0x14000bf0c
lea rcx, [rax + 0x18]
add rcx, qword [rax - 0x18]
jmp 0x14000bf0f
mov rcx, r13
mov qword [rcx], rdi
mov rax, qword [rdi + 0x78]
test rax, rax
je 0x14000bf24
mov ecx, 2
call rax
jmp 0x14000bf2a
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
cmp dword [rbp + 0x13f8], 1
jne 0x14000bf46
mov rcx, qword [r14]
lea rdx, str.__slave
call fcn.1401d7bc0
test eax, eax
je 0x14000bf63
cmp dword [rbp + 0x13f8], 2
jne 0x14000bfb1
mov rcx, qword [r14 + 8]
lea rdx, str.__slave
call fcn.1401d7bc0
test eax, eax
jne 0x14000bf70
mov rcx, rdi
call fcn.1400084dc
jmp 0x14000c56e
mov rcx, qword [r14 + 8]
lea rdx, str.__netinfo
call fcn.1401d7bc0
test eax, eax
jne 0x14000bfb1
lea rcx, [rsp + 0x40]
call fcn.140010af4
test eax, eax
jle 0x14000c56e
mov rdx, qword [rsp + 0x40]
lea rcx, str._s_r_n
call fcn.1400010e4
mov rcx, qword [rsp + 0x40]
jmp 0x14000c569
or r12, 0xffffffffffffffff
cmp qword [rdi + 0x38], r13
jne 0x14000c004
mov qword [rdi + 0x38], rbx
lea rdx, [rbp + 0x3a0]
mov r8d, 0x800
mov byte [rbx], r13b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [rbx - 0x18]
lea r8, [rbp + 0x3a0]
mov qword [rsp + 0x38], r13
mov r9d, r12d
mov qword [rsp + 0x30], r13
xor edx, edx
mov dword [rsp + 0x28], eax
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rdi + 0x38]
lea rdx, [rdi + 0xa04]
call fcn.140004254
mov r15d, 1
cmp dword [rbp + 0x13f8], r15d
jle 0x14000c0d8
lea rbx, [r14 + 8]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14000c038
mov rax, r13
jmp 0x14000c042
mov edx, 0x1000
call fcn.1401cbd78
mov rcx, qword [rbx]
lea r8, [0x14025345c]
movsxd rdx, eax
mov r9d, 1
call fcn.1400986f4
mov r12d, eax
cmp eax, 2
jle 0x14000c0b8
mov rcx, qword [rbx]
lea rdx, [0x14025364c]
mov r8d, 2
call fcn.1401cb240
test eax, eax
jne 0x14000c0b8
cmp r12d, 0xf
jne 0x14000c0b8
mov rcx, qword [rbx]
lea r8d, [rax + 0xd]
add rcx, 2
lea rdx, str.configUsesCWD
call fcn.1401cb240
test eax, eax
jne 0x14000c0b8
mov rcx, qword [rbx]
lea r8d, [r12 - 0xe]
add rcx, 0x10
lea rdx, [0x140252878]
call fcn.1401cb240
test eax, eax
je 0x14000c0cd
inc r15d
add rbx, 8
cmp r15d, dword [rbp + 0x13f8]
jge 0x14000c0d4
jmp 0x14000c02b
mov dword [rdi + 0x50], 1
or r12, 0xffffffffffffffff
mov rcx, qword [rdi + 0x38]
lea rdx, str..log
call fcn.14000370c
mov rcx, rax
xor edx, edx
call fcn.1400989ec
mov qword [0x1402c1608], rax
call fcn.14008eb98
mov rcx, qword [rdi]
lea rdx, [0x140008610]
mov r8, rdi
call fcn.140090c88
mov rcx, qword [r14]
lea r8, [0x1402519c4]
mov rdx, r12
call fcn.14009876c
test eax, eax
jle 0x14000c185
mov r8, qword [r14]
lea rcx, [0x1402c6b20]
movsxd rbx, eax
mov r15d, 0x10000
mov r9, rbx
mov edx, r15d
call fcn.1401cabfc
cmp rbx, r15
jae 0x14000c59a
lea r8, [0x1402c6b20]
mov dword [rsp + 0x28], 0x1000
mov byte [rbx + r8], r13b
mov r9d, r12d
lea rbx, [0x1402c2b20]
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea rax, [rbp + 0x13f8]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r14
cmp qword [rdi + 0x20], r13
jne 0x14000c517
cmp dword [rbp + 0x13f8], 2
jl 0x14000c207
mov rcx, qword [r14 + 8]
lea r8, [0x140253f9c]
mov r9d, 3
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.140098630
test eax, eax
jne 0x14000c517
cmp dword [rbp + 0x13f8], 2
jl 0x14000c207
mov rcx, qword [r14 + 8]
lea r9d, [rax + 4]
lea r8, str..zip
mov dword [rsp + 0x20], 1
mov rdx, r12
call fcn.140098630
test eax, eax
jne 0x14000c517
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000be5c]
call fcn.140090d78
mov rcx, qword [rdi]
call fcn.140093df8
mov qword [rdi], r13
cmp qword [rdi + 0x48], r13
je 0x14000c546
cmp dword [rdi + 0x9d8], r13d
je 0x14000c508
cmp dword [rdi + 0xbb0], r13d
jne 0x14000c3e8
call fcn.1400835b8
mov rbx, qword [rdi + 0x48]
mov rcx, rax
mov r14, rax
call fcn.14001d218
mov r8, r14
lea rdx, [0x140089828]
mov rcx, rbx
call fcn.14009b6d8
mov edx, r12d
mov rcx, r14
call fcn.14001b9b8
test rax, rax
je 0x14000c3ca
mov edx, r12d
mov rcx, r14
call fcn.140019a58
lea r8, [rsp + 0x40]
mov edx, r12d
mov rcx, r14
call fcn.14001b578
mov rbx, qword [rsp + 0x40]
mov r12, rax
movabs rax, 0xaaaaaaaaaaaaaaab
lea rcx, [rbx*4 + 4]
mul rcx
mov ecx, 0xfffffffa
lea r15, [rbx + 1]
mov rsi, rdx
shr rsi, 1
sub rcx, rsi
cmp r15, rcx
jae 0x14000c326
mov eax, 0xfffffffe
lea rdx, [rsi + 5]
sub rax, rbx
cmp rdx, rax
jae 0x14000c326
lea rax, [rbx + 6]
mov ecx, 0xffffffe7
add rax, rsi
cmp rax, rcx
jae 0x14000c326
test rdx, rdx
je 0x14000c309
lea rax, [rbx + 0x1e]
add rax, rsi
cmp rax, rcx
jae 0x14000c326
cmp r13, rdx
lea rcx, [rbx + 0x1e]
sbb rax, rax
and eax, 0x18
add rax, rsi
add rcx, rax
call fcn.1401cc40c
mov rcx, rax
jmp 0x14000c329
mov rcx, r13
lea eax, [rsi + 5]
xor r9d, r9d
movsxd r8, eax
lea eax, [rbx + 1]
movsxd rdx, eax
call fcn.140090854
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000c355
lea rdx, [rax + 0x18]
add rdx, qword [rax - 0x18]
mov qword [rsp + 0x40], rdx
jmp 0x14000c35a
mov qword [rsp + 0x40], r13
mov r9, rbx
mov r8, r12
mov rdx, r15
mov rcx, rsi
call section..text
mov rcx, r14
call fcn.140060ff8
mov rcx, rsi
cmp rbx, 0x7fffffff
jbe 0x14000c39d
call fcn.14009093c
mov rsi, r13
cmp dword [rdi + 0x9e4], r13d
je 0x14000c508
lea rcx, str._Service_Parameters___ERROR
jmp 0x14000c3de
lea r8, [rsp + 0x40]
mov edx, ebx
call fcn.140096cb8
cmp dword [rdi + 0x9e4], r13d
je 0x14000c508
mov rdx, rsi
lea rcx, str._Service_Parameters____s
call fcn.140099564
jmp 0x14000c508
cmp dword [rdi + 0x9e4], r13d
je 0x14000c508
lea rcx, str._Service_Parameters___NONE
call fcn.140099564
jmp 0x14000c508
mov rbx, qword [rdi + 0xbc8]
lea rdx, str.meshagent
mov rcx, rbx
call fcn.1401d7bc0
test eax, eax
je 0x14000c508
mov r8, qword [rbx - 0x18]
movabs rsi, 0xaaaaaaaaaaaaaaab
mov rax, rsi
lea rcx, [r8*4 + 0x78]
mul rcx
mov ecx, 0xfffffffa
lea rax, [r8 + 0x1e]
shr rdx, 1
sub rcx, rdx
cmp rax, rcx
jae 0x14000c487
mov eax, 0xffffffe1
lea r9, [rdx + 5]
sub rax, r8
cmp r9, rax
jae 0x14000c487
lea rax, [r8 + 0x23]
mov ecx, 0xffffffe7
add rax, rdx
cmp rax, rcx
jae 0x14000c487
test r9, r9
je 0x14000c469
lea rax, [r8 + 0x3b]
add rax, rdx
cmp rax, rcx
jae 0x14000c487
mov ecx, 0x3b
test r9, r9
lea eax, [rcx + 0x18]
cmovne ecx, eax
add rcx, r8
add rcx, rdx
call fcn.1401cc40c
mov r10, rax
jmp 0x14000c48a
mov r10, r13
mov r9, qword [rdi + 0xbc8]
mov rax, qword [r9 - 0x18]
lea rcx, [rax*4 + 0x78]
mov rax, rsi
mul rcx
mov eax, dword [r9 - 0x18]
mov rcx, r10
shr rdx, 1
add eax, 0x1e
add rdx, 5
xor r9d, r9d
movsxd r8, edx
movsxd rdx, eax
call fcn.140090854
mov rsi, rax
cmp qword [rax - 0x10], r13
jbe 0x14000c4da
lea rcx, [rax + 0x18]
add rcx, qword [rax - 0x18]
mov qword [rsp + 0x40], rcx
jmp 0x14000c4df
mov qword [rsp + 0x40], r13
mov r9, qword [rdi + 0xbc8]
lea r8, str.____meshServiceName__s___
mov rdx, qword [rax - 0x18]
mov rcx, rsi
call fcn.140001138
mov edx, eax
lea r8, [rsp + 0x40]
mov rcx, rsi
call fcn.140096cb8
mov rcx, qword [rdi + 0x48]
call fcn.14009c160
mov qword [rdi + 0x48], r13
jmp 0x14000c539
mov rcx, qword [rdi]
lea r9, [rsp + 0x48]
xor r8d, r8d
lea rdx, [0x14000be48]
call fcn.140090d78
mov rcx, qword [rdi]
call fcn.140093df8
mov qword [rdi], r13
test rsi, rsi
je 0x14000c546
mov rcx, rsi
call fcn.14009093c
mov eax, dword [0x1402c15f8]
dec eax
mov dword [0x1402c15f8], eax
test eax, eax
jg 0x14000c55d
call fcn.1400cdb60
mov rcx, qword [0x1402c1608]
test rcx, rcx
je 0x14000c56e
call fcn.1401cbd70
xor eax, eax
mov rcx, qword [rbp + 0x13a0]
xor rcx, rsp
call fcn.1401c3630
mov rbx, qword [rsp + 0x14f0]
add rsp, 0x14b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401c375c
int3