Function at 0x406900
Capabilities:
Delete registry key
Delete registry value
Query or enumerate registry value
Set registry value
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xcc]
sub esp, 0x14c
mov eax, dword [0x6009e4]
xor eax, ebp
mov dword [ebp + 0xc8], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
mov eax, edx
mov dword [ebp - 0x7c], esi
push edi
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], ebx
cmp dword [esi + 0x20], ebx
jne 0x4069cc
mov ecx, dword [esi + 0x18]
mov edx, 0x602e6c
call fcn.00403550
mov ecx, eax
call fcn.004b7110
mov dword [esi + 0x20], eax
mov eax, dword [ebp - 0x78]
cmp dword [esi + 0x20], ebx
jne 0x4069cc
mov dword [0x6247a4], eax
mov eax, dword [ebp + 0xd4]
mov dword [0x6247a8], eax
mov eax, dword [ebp + 0xd8]
mov dword [0x6247a0], esi
mov dword [0x6247ac], eax
mov eax, dword [esi + 0x6ec]
cmp eax, 0xa
je 0x4069b8
inc eax
push eax
push str.Unable_to_open_database___d_10_..._r_n
call fcn.004010e0
mov ecx, dword [esi]
mov edx, 0x6247a0
inc dword [esi + 0x6ec]
push ebx
push 0x4066f0
mov ecx, dword [ecx + 0x2e4]
push 0x7d0
call fcn.004b2450
add esp, 0x14
jmp 0x40763f
push str.Unable_to_open_database._r_n
call fcn.004010e0
add esp, 4
xor eax, eax
jmp 0x407644
mov edx, dword [esi]
call fcn.004ba180
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x6c]
push eax
push 0xf003f
push 0
push 0x602eb4
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x74], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, 1
test eax, eax
jne 0x406a3d
lea eax, [ebp - 0x74]
push eax
push 0
push 0
push 0
push 0x602ed4
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x406a34
cmp dword [ebp - 0x74], ebx
jbe 0x406a34
push 0x602ee0
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
test eax, eax
cmove ebx, edi
mov dword [ebp - 0x68], ebx
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 0
push 0
push dword [esi + 0x18]
push 0
push 0
push dword [esi]
push 0
call fcn.0049d550
xor edx, edx
mov ecx, eax
call fcn.0049d5c0
push 0xe88
push 0
mov edx, str._function__getMac____var_ret____var_ni__require_os_.networkInterfaces____for__var_f_in_ni___for__var_i_in_ni_f____if_ni_f__i_.type__ethernet__ni_f__i_.type__wireless__ret______ni_f__i_.mac________return_ret_______
mov dword [ebp - 0x70], eax
mov ecx, eax
call fcn.0040ec00
add esp, 0x28
test eax, eax
jne 0x406b23
mov edi, dword [ebp - 0x70]
mov ecx, edi
call fcn.00413cf0
push 0
xor edx, edx
mov ecx, edi
call fcn.0040e020
add esp, 4
test eax, eax
jne 0x406b23
mov eax, dword [edi + 0x44]
mov ecx, dword [edi + 0x40]
sub eax, ecx
sar eax, 3
lea edx, [eax - 1]
cmp edx, eax
jae 0x406ab6
lea eax, [ecx + edx*8]
test eax, eax
jne 0x406abb
mov eax, 0x5ed574
mov ecx, 0xfff8
cmp word [eax + 6], cx
jne 0x406b23
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x406b23
mov ebx, dword [eax + 0x14]
lea edi, [eax + 0x1c]
mov dword [ebp - 0x80], ebx
cmp ebx, 0x13
jb 0x406b20
push 0x400
push 0x602eec
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x602ff8
push 0
push 0
push eax
call fcn.004b7440
add esp, 0x14
mov dword [ebp - 0x6c], eax
test eax, eax
jne 0x406bbb
mov ecx, dword [esi + 0x20]
mov edx, 0x60300c
push ebx
push edi
push 0x11
call fcn.004b72a0
add esp, 0xc
mov ebx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x406b32
mov ecx, dword [eax + 0x2c]
call fcn.0042fbe0
cmp ebx, 1
je 0x406b42
mov ecx, esi
call fcn.00403a10
test eax, eax
je 0x406b5a
mov ecx, esi
call fcn.004036c0
test eax, eax
je 0x406b5a
push str.Certificate_error_r_n
call fcn.004010e0
add esp, 4
mov ecx, esi
call fcn.00403ca0
test eax, eax
je 0x406b72
push str.Certificate_validation_error_r_n
call fcn.004010e0
add esp, 4
push ecx
mov ecx, dword [esi + 0x18]
mov edx, str..tag
mov dword [ebp - 0x70], 0
call fcn.00403550
lea edx, [ebp - 0x70]
mov ecx, eax
call fcn.004acc90
mov edi, dword [ebp - 0x70]
mov ecx, dword [esi + 0x20]
test edi, edi
je 0x406ca9
push eax
push edi
push 3
mov edx, 0x6030c0
call fcn.004b72a0
push edi
call fcn.0058bf82
add esp, 0x10
jmp 0x406cb8
xor edi, edi
test ebx, ebx
jle 0x406b20
mov eax, dword [ebp - 0x74]
push 0x13
add eax, 0x1c
add eax, edi
push 0x603020
push eax
call fcn.0058b9b0
add esp, 0xc
test eax, eax
jne 0x406bed
add edi, 0x13
cmp edi, ebx
jl 0x406bc5
jmp 0x406b20
cmp edi, ebx
jge 0x406b20
mov edi, dword [ebp - 0x6c]
xor ebx, ebx
lea eax, [edi + 0x24]
call fcn.005851e0
mov ecx, esp
mov edx, edi
push 1
push 4
call fcn.004ae4d0
mov edi, eax
push 0x400
push 0x603034
lea eax, [edi + 4]
mov dword [edi], eax
call fcn.0058cca6
push dword [ebp - 0x6c]
mov ecx, dword [esi + 0x20]
mov edx, 0x603048
push edi
push eax
call fcn.004b7440
add esp, 0x1c
cmp dword [ebp - 0x6c], ebx
jle 0x406c83
nop
push 0x13
push str._00:00:00:00:00:00_
push edi
call fcn.0058b9b0
add esp, 0xc
test eax, eax
je 0x406c6d
mov edx, dword [ebp - 0x80]
push ecx
mov ecx, dword [ebp - 0x74]
push 0x13
push edi
add ecx, 0x1c
call fcn.004b3c70
add esp, 0xc
test eax, eax
jns 0x406c7a
add ebx, 0x13
add edi, 0x13
cmp ebx, dword [ebp - 0x6c]
jl 0x406c40
jmp 0x406c83
cmp ebx, dword [ebp - 0x6c]
jl 0x406b20
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x74]
mov edx, str.LocalMacAddresses
mov ecx, dword [esi + 0x20]
add eax, 0x1c
push eax
push 0x11
mov ebx, 1
call fcn.004b72a0
add esp, 0xc
jmp 0x406b23
push 3
mov edx, 0x6030c4
call fcn.004b7560
add esp, 4
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x38]
push 0xff
push eax
push 0xf
mov edx, str.ignoreProxyFile
call fcn.004b7440
add esp, 0xc
test eax, eax
jne 0x406d24
push ecx
mov ecx, dword [esi + 0x18]
mov edx, str..proxy
mov dword [ebp - 0x70], eax
call fcn.00403550
lea edx, [ebp - 0x70]
mov ecx, eax
call fcn.004acc90
mov edi, dword [ebp - 0x70]
mov ecx, dword [esi + 0x20]
test edi, edi
je 0x406d15
push eax
push edi
push 8
mov edx, 0x6030e0
call fcn.004b72a0
push edi
call fcn.0058bf82
add esp, 0x10
jmp 0x406d24
push 8
mov edx, 0x6030ec
call fcn.004b7560
add esp, 4
mov ecx, dword [esi + 0x18]
mov edx, str..mshx
call fcn.00403550
mov edx, eax
mov ecx, esi
call fcn.004062e0
test eax, eax
jne 0x406d95
mov ecx, dword [esi + 0x18]
mov edx, 0x603100
call fcn.00403550
mov edx, eax
mov ecx, esi
call fcn.004062e0
test eax, eax
jne 0x406d95
mov edx, str.mesh_linumshx
mov ecx, esi
call fcn.004062e0
test eax, eax
jne 0x406d95
mov edx, str.mesh_limshx
mov ecx, esi
call fcn.004062e0
test eax, eax
jne 0x406d95
mov ecx, esi
call fcn.00406170
mov ecx, dword [esi + 0x18]
mov edx, 0x603124
call fcn.00403550
mov edx, eax
mov ecx, esi
call fcn.004062e0
push 0x400
push 0x60312c
mov dword [ebp - 0x70], 0
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x603140
push 0
push 0
push eax
call fcn.004b7440
add esp, 0x14
cmp eax, 4
jne 0x406df7
push 0x400
push 0x603154
call fcn.0058cca6
push 4
lea ecx, [ebp - 0x70]
mov edx, str.AgentCapabilities
push ecx
mov ecx, dword [esi + 0x20]
push eax
call fcn.004b7440
add esp, 0x14
push dword [ebp - 0x70]
call dword [sym.imp.WS2_32.dll_ntohl]
or dword [esi + 0x34], eax
lea eax, [ebp - 0x68]
push eax
push 0x60317c
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x407176
mov dword [ebp - 0x6c], eax
lea ecx, [esi + 0x6a4]
lea eax, [ebp - 0x6c]
mov edx, 0x30
push eax
call fcn.004b2110
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edx, eax
add esp, 4
test edx, edx
jle 0x406e88
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x406e88
xor eax, eax
test edx, edx
jle 0x406e62
mov cl, byte [eax + edi]
cmp cl, 0x2b
jne 0x406e54
mov byte [eax + edi], 0x40
jmp 0x406e5d
cmp cl, 0x2f
jne 0x406e5d
mov byte [eax + edi], 0x24
inc eax
cmp eax, edx
jl 0x406e46
push edx
push edi
push 1
push 0
push 0x60319c
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push edi
call fcn.0058bf82
add esp, 4
mov dword [ebp - 0x6c], 0
jmp 0x406e92
push 0x6031a4
push dword [ebp - 0x68]
call ebx
lea edi, [esi + 0x594]
mov ecx, 0x6247a0
test edi, edi
je 0x406ed3
xor edx, edx
movzx eax, byte [edx + edi]
lea ecx, [ecx + 2]
shr eax, 4
movzx eax, byte [eax + 0x5f00e0]
mov byte [ecx - 2], al
movzx eax, byte [edx + edi]
inc edx
and eax, 0xf
movzx eax, byte [eax + 0x5f00e0]
mov byte [ecx - 1], al
cmp edx, 0x30
jl 0x406ea3
mov byte [ecx], 0
jmp 0x406eda
mov byte [0x6247a0], 0
mov ecx, 0x6247a0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406ee2
sub ecx, edx
push ecx
push 0x6247a0
push 1
push 0
push 0x6031ac
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0x400
push 0x6031b8
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x6031c0
push 0
push 0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jne 0x406f35
push 0x6031c8
jmp 0x406fd7
push 0x400
push 0x6031d0
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x6031d8
push 0x10000
push 0x6257a0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jle 0x406fd2
lea ecx, [ebp - 0x6c]
mov edx, eax
push ecx
mov ecx, 0x6257a0
call fcn.004b2110
mov edx, eax
add esp, 4
test edx, edx
jle 0x406fcb
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x406fcb
xor eax, eax
test edx, edx
jle 0x406fac
nop dword [eax]
mov cl, byte [eax + edi]
cmp cl, 0x2b
jne 0x406f9e
mov byte [eax + edi], 0x40
jmp 0x406fa7
cmp cl, 0x2f
jne 0x406fa7
mov byte [eax + edi], 0x24
inc eax
cmp eax, edx
jl 0x406f90
push edx
push edi
push 1
push 0
push 0x6031e0
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push edi
call fcn.0058bf82
add esp, 4
jmp 0x406fdc
push 0x6031e8
jmp 0x406fd7
push 0x6031f0
push dword [ebp - 0x68]
call ebx
push 0x400
push 0x6031f8
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x603204
push 0x10000
push 0x6257a0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jne 0x40701c
push 0x603210
push dword [ebp - 0x68]
call ebx
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x407047
mov ecx, 0x6257a0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407024
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
sub ecx, edx
push ecx
push 0x6257a0
push 1
push 0
push 0x603220
push dword [ebp - 0x68]
call edi
push 0x400
push 0x603230
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x60323c
push 0x10000
push 0x6257a0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jne 0x407081
push 0x603248
push dword [ebp - 0x68]
call ebx
jmp 0x4070ad
mov ecx, 0x6257a0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407090
sub ecx, edx
push ecx
push 0x6257a0
push 1
push 0
push 0x603258
push dword [ebp - 0x68]
call edi
push 0x400
push 0x603268
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, str.WebProxy
push 0x10000
push 0x6257a0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jne 0x4070e7
push 0x603280
push dword [ebp - 0x68]
call ebx
jmp 0x40710d
mov ecx, 0x6257a0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4070f0
sub ecx, edx
push ecx
push 0x6257a0
push 1
push 0
push 0x603288
push dword [ebp - 0x68]
call edi
push 0x400
push 0x603290
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x603294
push 0x10000
push 0x6257a0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
jne 0x407147
push 0x603298
push dword [ebp - 0x68]
call ebx
jmp 0x40716d
mov ecx, 0x6257a0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407150
sub ecx, edx
push ecx
push 0x6257a0
push 1
push 0
push 0x60329c
push dword [ebp - 0x68]
call edi
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esi + 0x600], 0
lea edx, [esi + 0x600]
push ecx
mov ecx, dword [esi + 0x1c]
jne 0x40718f
push 0
xor edx, edx
jmp 0x407195
push dword [esi + 0x5f4]
call fcn.004baf60
add esp, 8
cmp dword [ebp + 0xd8], 0
je 0x407222
mov eax, dword [ebp - 0x78]
cmp eax, 1
je 0x407222
cmp eax, 2
jne 0x4069c5
mov eax, dword [ebp + 0xd4]
mov edx, 0x6032a0
mov ecx, dword [eax + 4]
mov eax, ecx
mov bl, byte [eax]
cmp bl, byte [edx]
jne 0x4071e7
test bl, bl
je 0x4071e3
mov bl, byte [eax + 1]
cmp bl, byte [edx + 1]
jne 0x4071e7
add eax, 2
add edx, 2
test bl, bl
jne 0x4071c7
xor eax, eax
jmp 0x4071ec
sbb eax, eax
or eax, 1
test eax, eax
je 0x407222
mov eax, 0x6032a4
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407215
test dl, dl
je 0x407211
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407215
add ecx, 2
add eax, 2
test dl, dl
jne 0x4071f5
xor eax, eax
jmp 0x40721a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4069c5
mov ecx, dword [esi + 0x18]
mov edx, 0x6032ac
call fcn.00403550
test eax, eax
je 0x40723c
push eax
call fcn.00592c39
add esp, 4
mov ecx, dword [esi + 0x18]
mov edx, str..corereset
call fcn.00403550
mov edi, eax
push 0
push edi
call fcn.00593a08
add esp, 8
test eax, eax
jne 0x407287
push 0x400
push 0x6032c4
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x6032d0
push eax
call fcn.004b7560
add esp, 0xc
test edi, edi
je 0x407287
push edi
call fcn.00592c39
add esp, 4
cmp dword [esi + 0x2c], 0
jne 0x4072b5
push 0x400
push 0x6032dc
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x6032e8
push 0
push 0
push eax
call fcn.004b7440
add esp, 0x14
mov ebx, eax
jmp 0x4072b7
xor ebx, ebx
mov eax, dword [esi + 8]
test eax, eax
je 0x40736d
push dword [esi]
push eax
call fcn.00402ed0
mov ecx, dword [esi + 8]
or edx, 0xffffffff
push 0x6032f4
call fcn.0040f5e0
mov ecx, dword [esi + 8]
add esp, 0xc
mov eax, dword [ecx + 0x44]
mov edi, dword [ecx + 0x40]
sub eax, edi
sar eax, 3
lea edx, [eax - 2]
cmp edx, eax
jae 0x4076b1
lea edx, [edi + edx*8]
mov dword [ebp - 0x78], edx
lea edx, [eax - 1]
mov dword [ebp - 0x70], edx
cmp edx, eax
jae 0x4076a0
mov edx, dword [ebp - 0x78]
mov eax, dword [edi + eax*8 - 8]
mov esi, dword [ebp - 0x78]
mov ecx, dword [edx]
mov edx, dword [edx + 4]
mov dword [esi], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [edi + eax*8 + 4]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x70]
mov esi, dword [ebp - 0x7c]
mov dword [edi + eax*8 + 4], edx
mov edx, str.Ready
mov dword [edi + eax*8], ecx
mov ecx, dword [esi + 8]
call fcn.00413910
mov ecx, dword [esi + 8]
mov edx, 1
push 0
call fcn.0040e020
add esp, 4
test eax, eax
je 0x407365
push 0x6234ab
push dword [esi + 8]
call fcn.00470ba0
add esp, 8
mov ecx, dword [esi + 8]
call fcn.00414cb0
cmp dword [esi + 0x2c], 0
jne 0x4074d4
push 0
push 0
push dword [esi + 0x14]
push dword [esi + 0x18]
push dword [esi + 0x20]
push 0
push dword [esi]
push 0
call fcn.0049d550
xor edx, edx
mov ecx, eax
call fcn.0049d5c0
push esi
mov ecx, eax
mov dword [esi + 8], eax
call fcn.004034d0
mov ecx, dword [esi + 8]
mov edx, 0x406680
push esi
call fcn.00470b00
add esp, 0x28
test ebx, ebx
jle 0x4074d4
push 0x400
push 0x603304
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, str.noUpdateCoreModule
push 0
push 0
push eax
call fcn.004b7440
add esp, 0x14
test eax, eax
je 0x407473
push str._CoreModule:_Update_Disabled_n
mov dword [esi + 0x2c], 1
call fcn.004010e0
push ebx
call fcn.0058d200
mov edi, eax
add esp, 8
test edi, edi
jne 0x40740d
jmp 0x407662
push ebx
push 0
push edi
call fcn.005869c0
push 0x400
push 0x603350
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x60335c
push ebx
push edi
push eax
call fcn.004b7440
mov ecx, dword [esi + 8]
lea eax, [ebx - 4]
push 0xd
push 0x603368
push eax
lea edx, [edi + 4]
call fcn.0049dc40
add esp, 0x2c
test eax, eax
jne 0x407460
mov ecx, dword [esi + 8]
xor edx, edx
call fcn.0040df70
test eax, eax
je 0x407468
mov ecx, dword [esi + 8]
call fcn.00414cb0
push edi
call fcn.0058bf82
add esp, 4
jmp 0x4074d4
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x7c]
sub esp, 0xc
mov dword [ebp - 0x7c], esi
call fcn.004716a0
mov ecx, dword [esi + 8]
mov dword [esi + 0x590], eax
call fcn.00413e30
mov edx, dword [esi + 0x590]
mov ecx, dword [esi + 8]
call fcn.00414800
push dword [esi + 0x590]
push 0x60b2d0
push 0x20
push 0x6458c0
call fcn.00401140
mov ecx, dword [esi + 8]
mov edx, 0xfffffffe
push 0x6458c0
call fcn.0040f8b0
mov ecx, dword [esi + 8]
add esp, 0x20
call fcn.00414cb0
mov ecx, dword [esi]
mov edx, 0x4066a0
push esi
call fcn.004ad630
mov ecx, esi
call fcn.00405fe0
push 0x400
push 0x603378
call fcn.0058cca6
mov ecx, dword [esi + 0x20]
mov edx, 0x603384
push 0x1000
push 0x6247a0
push eax
call fcn.004b7440
add esp, 0x18
cmp eax, 5
jle 0x40763f
mov ecx, 0x6247a0
mov edx, 0x603390
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40763f
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x40763f
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movups xmmword [ebp - 0x48], xmm0
movups xmmword [ebp - 0x64], xmm0
movq qword [ebp - 0x54], xmm0
call fcn.004b4210
mov edi, dword [sym.imp.WS2_32.dll_htons]
test eax, eax
je 0x40759f
mov eax, 0x17
push 0x425d
mov word [ebp - 0x64], ax
call edi
mov word [ebp - 0x62], ax
mov eax, dword [0x6234e4]
test eax, eax
jne 0x407589
call fcn.004b4390
mov eax, dword [0x6234e4]
cmp eax, 1
jne 0x40759f
lea eax, [ebp - 0x5c]
push eax
push str.FF02:0:0:0:0:0:0:FE
push 0x17
call dword [0x6234f0]
mov ebx, 2
push 0x425d
mov word [ebp - 0x48], bx
call edi
mov word [ebp - 0x46], ax
mov edx, str.239.255.255.235
lea eax, [ebp - 0x44]
mov ecx, ebx
push eax
call fcn.004b4460
push esi
push ecx
mov ecx, dword [esi]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x425e
call fcn.004ade00
add esp, 0x18
mov dword [esi + 0x6d8], eax
test eax, eax
jne 0x4075fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xdb
push 0xeea
mov edx, 0x6033bc
jmp 0x407635
push ecx
push esi
push ecx
mov ecx, dword [esi]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
push 0
call fcn.004ade00
add esp, 0x18
mov dword [esi + 0x6dc], eax
test eax, eax
jne 0x40763f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xdb
push 0xeee
mov edx, str...meshcore_agentcore.c
xor ecx, ecx
call fcn.004b47e0
add esp, 0xc
mov eax, 1
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xc8]
xor ecx, ebp
call fcn.00584a28
lea esp, [ebp + 0xcc]
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x4c4
mov edx, 0x61c4e8
xor ecx, ecx
call fcn.004b47e0
push 0x4c4
push 0x61c504
push 0x61c520
call fcn.004010e0
add esp, 0x18
push 0xfe
call fcn.00587d2d
push 0xffffffffffffffff
push 0x178
mov edx, 0x603f5c
call fcn.0040d170
push 0xfffffffffffffffe
push 0x178
mov edx, 0x603f5c
call fcn.0040d170
int3