Function at 0x14010b840
Capabilities:
Execute command

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
call fcn.14004c757
lea rsi, [rsp + 0x50]
lea rbx, [rsp + 0x30]
call fcn.140002370
mov rdx, rsi
mov rcx, rbx
mov byte [rsp + 0x3c], 0
mov rax, qword [0x140122568]
mov rbp, qword [0x140122478]
mov edi, dword [0x140122480]
mov qword [rsp + 0x50], rax
movabs rax, 0x57656e694c646e
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x38], edi
call fcn.140002660
call rax
mov rcx, rax
call fcn.140035af0
cmp byte [0x14015b2e0], 0
je 0x14010b940
lea r12, [rsp + 0x20]
call fcn.14000bb90
test al, al
jne 0x14010ba64
movdqu xmm0, xmmword [0x1401225a0]
mov rdx, rbx
mov rcx, r12
mov dword [rsp + 0x40], 0x6f666e
mov byte [rsp + 0x2c], 0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], edi
call fcn.140002660
mov rcx, rsi
call rax
call fcn.14000bcd0
mov edx, dword [rsp + 0x70]
cmp eax, 0xa
je 0x14010b915
mov eax, dword [rsp + 0x70]
lea edx, [rax + rax]
xor ecx, ecx
call fcn.140014380
test al, al
jne 0x14010b9e9
mov eax, 1
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov rax, qword [0x140122580]
lea r12, [rsp + 0x20]
mov rdx, rbx
mov byte [rsp + 0x3c], 0
movdqu xmm0, xmmword [0x140122570]
mov rcx, r12
mov dword [rsp + 0x68], 0x787376
mov qword [rsp + 0x60], rax
mov rax, qword [0x140122588]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], 0x41786574
mov byte [rsp + 0x2c], 0
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], edi
call fcn.140002660
xor ecx, ecx
mov r8, rsi
mov edx, 1
call rax
movdqu xmm0, xmmword [0x140122590]
mov rdx, rsi
mov rcx, rbx
mov r13, rax
mov dword [rsp + 0x60], 0x746365
mov byte [rsp + 0x3c], 0
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x38], edi
movups xmmword [rsp + 0x50], xmm0
call fcn.140002660
xor edx, edx
mov rcx, r13
call rax
test eax, eax
je 0x14010b8c0
jmp 0x14010b924
xor ecx, ecx
call fcn.140014440
test al, al
je 0x14010b924
call fcn.14000bcd0
cmp eax, 0xe
je 0x14010babe
xor eax, eax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
call fcn.14000bcd0
cmp eax, 0xb
je 0x14010ba6e
call fcn.14000bcd0
cmp eax, 0xa
je 0x14010ba6e
xor ecx, ecx
call fcn.1400148e0
test al, al
jne 0x14010bb16
call fcn.140014d80
lea rcx, [0x140122360]
call fcn.140034280
call fcn.14000bb70
test al, al
jne 0x14010baf9
mov ecx, 2
call sub.msvcrt.dll_raise
xor eax, eax
jmp 0x14010b929
call fcn.14000c2c0
jmp 0x14010b8cd
mov rcx, r12
call fcn.14000d150
test eax, eax
je 0x14010ba26
mov rsi, qword [rsp + 0x20]
lea rdi, [rsp + 0x40]
jmp 0x14010bab4
mov r8, qword [rsi + 8]
mov qword [rsp + 0x30], rdi
mov rcx, rbx
mov rdx, qword [rsi]
add r8, r8
add r8, rdx
call fcn.1400342d0
mov rcx, rbx
call fcn.140012980
mov rcx, rbx
call fcn.1400f2e40
mov rsi, qword [rsi + 0x20]
test rsi, rsi
jne 0x14010ba86
jmp 0x14010ba26
mov r8, qword [0x14015b308]
mov rdx, qword [0x14015b300]
lea rax, [rsp + 0x40]
mov rcx, rbx
mov qword [rsp + 0x30], rax
add r8, r8
add r8, rdx
call fcn.1400342d0
mov rcx, rbx
call fcn.140012980
mov rcx, rbx
call fcn.1400f2e40
jmp 0x14010ba06
lea rcx, str.bcdedit__deletevalue_default_safeboot
call sub.msvcrt.dll_system
lea rcx, str.shutdown__r__t_0
call sub.msvcrt.dll_system
jmp 0x14010ba53
xor ecx, ecx
call fcn.140014910
jmp 0x14010ba35