Function at 0x140012d10
Capabilities:
Create process on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6b0
mov rax, qword [0x14008b020]
xor rax, rsp
mov qword [rsp + 0x6a0], rax
mov edi, r9d
mov dword [rsp + 0x70], r9d
mov r15, r8
mov r13, rdx
mov r14, rcx
mov r12, qword [rsp + 0x710]
xor esi, esi
mov dword [rsp + 0x50], esi
lea rcx, [rsp + 0x3c0]
call fcn.14000d880
nop
lea rax, [rsp + 0x420]
mov qword [rsp + 0x60], rax
lea rax, str.PsfRuntime
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], 0xa
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], 0xa
xorps xmm0, xmm0
movups xmmword [rsp + 0x420], xmm0
mov qword [rsp + 0x430], rsi
mov qword [rsp + 0x438], rsi
movaps xmm1, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x2a0], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x420]
call fcn.140004560
mov ebx, 0x100
mov dword [rsp + 0x50], ebx
btr ebx, 8
mov dword [rsp + 0x50], ebx
bts ebx, 7
mov dword [rsp + 0x50], ebx
btr ebx, 7
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x420]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x400]
call fcn.14000c3b0
nop
mov rdx, qword [rsp + 0x438]
cmp rdx, 8
jb 0x140012e7b
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x78], rdx
mov rcx, qword [rsp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012e76
add rdx, 0x27
mov qword [rsp + 0x78], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140b9
call fcn.14003d1f0
mov qword [rsp + 0x430], rsi
mov qword [rsp + 0x438], 7
mov word [rsp + 0x420], si
lea rax, [rsp + 0x440]
mov qword [rsp + 0x60], rax
lea rax, str.64.dll
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 6
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x440], xmm0
mov qword [rsp + 0x450], rsi
mov qword [rsp + 0x458], rsi
movaps xmm1, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x250], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x440]
call fcn.140004560
bts ebx, 0xb
mov dword [rsp + 0x50], ebx
btr ebx, 0xb
mov dword [rsp + 0x50], ebx
bts ebx, 0xa
mov dword [rsp + 0x50], ebx
btr ebx, 0xa
mov dword [rsp + 0x50], ebx
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x400]
call fcn.140016570
nop
mov rdx, qword [rsp + 0x458]
cmp rdx, 8
jb 0x140012fad
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x80], rdx
mov rcx, qword [rsp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012fa8
add rdx, 0x27
mov qword [rsp + 0x80], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140be
call fcn.14003d1f0
mov qword [rsp + 0x450], rsi
mov qword [rsp + 0x458], 7
mov word [rsp + 0x440], si
lea rcx, [rsp + 0x400]
call fcn.14000cd40
test al, al
je 0x140013ff4
cmp byte [rsp + 0x718], 0
jne 0x140013ff4
lea rcx, [rsp + 0x560]
call fcn.140014120
nop
lea rcx, [rsp + 0x400]
cmp qword [rsp + 0x418], 8
cmovae rcx, qword [rsp + 0x400]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
call qword [sym.imp.PsfRuntime64.dll_PSFQueryPackageRootPath]
lea rcx, [rsp + 0x3a0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x170], rax
mov rdi, 0xffffffffffffffff
mov rcx, rdi
nop
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140013040
mov qword [rsp + 0x178], rcx
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x3a0], xmm0
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3b8], rsi
movaps xmm1, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x260], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x3a0]
call fcn.140004560
bts ebx, 0xd
mov dword [rsp + 0x50], ebx
btr ebx, 0xd
mov dword [rsp + 0x50], ebx
bts ebx, 0xc
mov dword [rsp + 0x50], ebx
btr ebx, 0xc
mov dword [rsp + 0x50], ebx
xor ecx, ecx
call qword [sym.imp.PsfRuntime64.dll_PSFQueryCurrentAppLaunchConfig]
mov rsi, rax
test rax, rax
je 0x140013364
cmp qword [r15 + 0x10], 0
jne 0x140013148
lea rdx, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 8
cmovae rdx, qword [rsp + 0x3c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x480], xmm0
xor r15d, r15d
mov qword [rsp + 0x490], r15
mov qword [rsp + 0x498], r15
mov r8, rdi
inc r8
cmp word [rdx + r8*2], r15w
jne 0x140013124
lea rcx, [rsp + 0x480]
call fcn.140004560
lea rax, [rsp + 0x480]
or ebx, 1
jmp 0x14001315f
mov rdx, r15
lea rcx, [rsp + 0x540]
call fcn.140003f50
nop
or ebx, 2
xor r15d, r15d
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0x500]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001317e
mov rax, qword [rax]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rcx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x500], xmm0
mov qword [rsp + 0x510], r15
mov qword [rsp + 0x518], r15
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x270], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x500]
call fcn.140004560
bts ebx, 0x11
mov dword [rsp + 0x50], ebx
btr ebx, 0x11
mov dword [rsp + 0x50], ebx
bts ebx, 0x10
mov dword [rsp + 0x50], ebx
btr ebx, 0x10
mov dword [rsp + 0x50], ebx
lea r9, [rsp + 0x3a0]
lea r8, [rsp + 0x500]
mov rdx, rsi
lea rcx, [rsp + 0x560]
call fcn.140010210
nop
lea rcx, [rsp + 0x500]
call fcn.14000c400
nop
test bl, 2
je 0x140013253
and ebx, 0xfffffffd
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0x540]
call fcn.140003ea0
nop
test bl, 1
je 0x1400132d4
and ebx, 0xfffffffe
mov dword [rsp + 0x50], ebx
mov rdx, qword [rsp + 0x498]
cmp rdx, 8
jb 0x1400132b7
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x88], rdx
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400132b2
add rdx, 0x27
mov qword [rsp + 0x88], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140c4
call fcn.14003d1f0
mov qword [rsp + 0x490], r15
mov qword [rsp + 0x498], 7
mov word [rsp + 0x480], r15w
lea r8, [rsp + 0x580]
cmp qword [rsp + 0x598], 8
cmovae r8, qword [rsp + 0x580]
lea rdx, str.StartingScript_commandString
lea rcx, str._t_s_ls_n
call fcn.14000da10
lea r8, [rsp + 0x5b0]
cmp qword [rsp + 0x5c8], 8
cmovae r8, qword [rsp + 0x5b0]
lea rdx, str.StartingScript_currentDirectory
lea rcx, str._t_s_ls_n
call fcn.14000da10
lea rcx, str.StartingScript_waitForScriptToFinishtrue
lea rax, str.StartingScript_waitForScriptToFinishfalse
cmp byte [rsp + 0x5ac], 0
cmove rcx, rax
call fcn.14000da10
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x560]
call fcn.140010ce0
jmp 0x140013367
xor r15d, r15d
lea rcx, [rsp + 0x4a0]
call fcn.140024380
nop
test rsi, rsi
je 0x1400133ab
mov rax, qword [rsi]
lea rdx, str.workingDirectory
mov rcx, rsi
call qword [rax + 0x38]
test rax, rax
je 0x1400133ab
mov rcx, rax
call fcn.14000d1e0
mov rcx, qword [rax]
mov r8, qword [rcx + 0x40]
xor edx, edx
mov rcx, rax
call r8
mov rsi, rax
jmp 0x1400133ae
mov rsi, r15
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x60], rax
mov rax, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 8
jb 0x1400133c9
mov r14, qword [r14]
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x138], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x3e0], xmm0
mov qword [rsp + 0x3f0], r15
mov qword [rsp + 0x3f8], r15
movaps xmm1, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x280], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x3e0]
call fcn.140004560
bts ebx, 0xf
mov dword [rsp + 0x50], ebx
btr ebx, 0xf
mov dword [rsp + 0x50], ebx
bts ebx, 0xe
mov dword [rsp + 0x50], ebx
btr ebx, 0xe
mov dword [rsp + 0x50], ebx
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x3e0]
call fcn.14000c2d0
nop
mov r8, rax
lea rdx, [0x140076c7c]
lea rcx, [rsp + 0x500]
call fcn.14001bda0
nop
lea r8, [0x140076ef8]
mov rdx, rax
lea rcx, [rsp + 0x540]
call fcn.14001be20
nop
mov r8, r13
mov rdx, rax
lea rcx, [rsp + 0x4e0]
call fcn.14001bea0
nop
lea rcx, [rsp + 0x540]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x500]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x4c0]
call fcn.14000c400
mov dword [rsp + 0x1e0], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e8], xmm0
movups xmmword [rsp + 0x1f8], xmm0
movups xmmword [rsp + 0x208], xmm0
movups xmmword [rsp + 0x218], xmm0
movups xmmword [rsp + 0x228], xmm0
movups xmmword [rsp + 0x238], xmm0
mov dword [rsp + 0x21c], 1
mov eax, dword [rsp + 0x70]
mov word [rsp + 0x220], ax
test rsi, rsi
je 0x140013618
lea rax, [rsp + 0x460]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x1a0], rsi
nop dword [rax + rax]
inc rdi
cmp word [rsi + rdi*2], 0
jne 0x140013550
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x460], xmm0
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x478], r15
movaps xmm1, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x290], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rsp + 0x460]
call fcn.140004560
bts ebx, 0x13
mov dword [rsp + 0x50], ebx
btr ebx, 0x13
mov dword [rsp + 0x50], ebx
bts ebx, 0x12
mov dword [rsp + 0x50], ebx
btr ebx, 0x12
mov dword [rsp + 0x50], ebx
or ebx, 4
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x460]
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x520]
call fcn.14000c3b0
mov r8, rax
or ebx, 8
mov dword [rsp + 0x50], ebx
cmp qword [rax + 0x18], 8
jb 0x140013642
mov r8, qword [rax]
jmp 0x140013642
cmp qword [rsp + 0x4b0], 0
jne 0x140013628
mov r8, r15
jmp 0x140013642
lea r8, [rsp + 0x4a0]
cmp qword [rsp + 0x4b8], 8
cmovae r8, qword [rsp + 0x4a0]
mov rax, qword [r12 + 0x10]
test rax, rax
jne 0x140013651
mov r12, r15
jmp 0x14001365d
cmp qword [r12 + 0x18], 8
jb 0x14001365d
mov r12, qword [r12]
neg rax
sbb eax, eax
and eax, 0x400
lea rdx, [rsp + 0x4e0]
cmp qword [rsp + 0x4f8], 8
cmovae rdx, qword [rsp + 0x4e0]
lea rcx, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 8
cmovae rcx, qword [rsp + 0x3e0]
lea r9, [rsp + 0x1c0]
mov qword [rsp + 0x48], r9
lea r9, [rsp + 0x1e0]
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
test bl, 8
je 0x1400136f3
and ebx, 0xfffffff7
mov dword [rsp + 0x50], ebx
lea rcx, [rsp + 0x520]
call fcn.14000c400
nop
test bl, 4
je 0x140013774
and ebx, 0xfffffffb
mov dword [rsp + 0x50], ebx
mov rdx, qword [rsp + 0x478]
cmp rdx, 8
jb 0x140013757
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x90], rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013752
add rdx, 0x27
mov qword [rsp + 0x90], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140ca
call fcn.14003d1f0
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x478], 7
mov word [rsp + 0x460], r15w
test edi, edi
jne 0x140013a53
lea rcx, [rsp + 0x2b0]
call fcn.140014f00
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [0x14008bbf8]
mov r9, qword [rcx + 0x10]
mov r8d, eax
lea rdx, [rsp + 0x520]
lea rcx, [0x14008bbf8]
call r9
nop
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400137c0
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x4c0]
call fcn.14000d120
nop
lea rcx, [rsp + 0x520]
call fcn.1400167c0
xor r8d, r8d
mov rdx, qword [rsp + 0x4d0]
add rdx, 0xfffffffffffffffd
lea rcx, [rsp + 0x4c0]
call fcn.140003d80
lea rcx, [rsp + 0x2b0]
call fcn.14001bf20
mov rdi, rax
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x3e0]
call fcn.14000c2d0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001384e
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.14001e8f0
lea rdx, str.__n__Error:
mov rcx, rax
call fcn.14001c1f0
lea rdx, [rsp + 0x4c0]
cmp qword [rsp + 0x4d8], 8
cmovae rdx, qword [rsp + 0x4c0]
mov r8, qword [rsp + 0x4d0]
mov rcx, rax
call fcn.14001e8f0
lea rdx, [0x1400765c8]
mov rcx, rax
call fcn.14001c1f0
mov edx, ebx
mov rcx, rax
call fcn.140015020
mov rcx, rax
lea rdx, [0x1400765b4]
call fcn.14001c1f0
nop
lea rcx, [rsp + 0x540]
call fcn.14000c400
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x2b0]
call fcn.140014e00
nop
cmp qword [rax + 0x18], 8
jb 0x1400138e8
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.PsfRuntime64.dll_PSFReportError]
nop
lea rcx, [rsp + 0x520]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x4c0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x2b0]
call fcn.1400143a0
nop
lea rcx, [rsp + 0x4e0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x3e0]
call fcn.14000c400
nop
lea rcx, [rsp + 0x4a0]
call fcn.140003ea0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x14001399e
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x98], rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013999
add rdx, 0x27
mov qword [rsp + 0x98], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140d0
call fcn.14003d1f0
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rcx, [rsp + 0x560]
call fcn.140014340
nop
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140013a2f
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xa0], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013a2a
add rdx, 0x27
mov qword [rsp + 0xa0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140d6
call fcn.14003d1f0
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov eax, ebx
jmp 0x140014096
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x140013cf0
cmp eax, 0xffffffff
je 0x140013bb1
lea rcx, [rsp + 0x4e0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x3e0]
call fcn.14000c400
nop
lea rcx, [rsp + 0x4a0]
call fcn.140003ea0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x140013af9
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xa8], rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013af4
add rdx, 0x27
mov qword [rsp + 0xa8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140dc
call fcn.14003d1f0
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rcx, [rsp + 0x560]
call fcn.140014340
nop
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140013b8a
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xb0], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013b85
add rdx, 0x27
mov qword [rsp + 0xb0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140e2
call fcn.14003d1f0
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov eax, 6
jmp 0x140014096
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rsp + 0x4e0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x3e0]
call fcn.14000c400
nop
lea rcx, [rsp + 0x4a0]
call fcn.140003ea0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x140013c3b
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xb8], rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013c36
add rdx, 0x27
mov qword [rsp + 0xb8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140e8
call fcn.14003d1f0
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rcx, [rsp + 0x560]
call fcn.140014340
nop
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140013ccc
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xc0], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013cc7
add rdx, 0x27
mov qword [rsp + 0xc0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140ee
call fcn.14003d1f0
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov eax, ebx
jmp 0x140014096
lea r8, [rsp + 0x618]
cmp qword [rsp + 0x630], 8
cmovae r8, qword [rsp + 0x618]
lea rdx, str.EndingScript_commandString
lea rcx, str._t_s_ls_n
call fcn.14000da10
lea r8, [rsp + 0x648]
cmp qword [rsp + 0x660], 8
cmovae r8, qword [rsp + 0x648]
lea rdx, str.EndingScript_currentDirectory
lea rcx, str._t_s_ls_n
call fcn.14000da10
lea rdx, [rsp + 0x5f8]
lea rcx, [rsp + 0x560]
call fcn.140010ce0
lea rdx, [rsp + 0x54]
mov rcx, qword [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x140013eb9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rcx, [rsp + 0x4e0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x3e0]
call fcn.14000c400
nop
lea rcx, [rsp + 0x4a0]
call fcn.140003ea0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x140013e04
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xc8], rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013dff
add rdx, 0x27
mov qword [rsp + 0xc8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140f4
call fcn.14003d1f0
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rcx, [rsp + 0x560]
call fcn.140014340
nop
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140013e95
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xd0], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013e90
add rdx, 0x27
mov qword [rsp + 0xd0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400140fa
call fcn.14003d1f0
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov eax, ebx
jmp 0x140014096
mov ebx, dword [rsp + 0x54]
lea rcx, [rsp + 0x4e0]
call fcn.140003ea0
nop
lea rcx, [rsp + 0x3e0]
call fcn.14000c400
nop
lea rcx, [rsp + 0x4a0]
call fcn.140003ea0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x140013f3f
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xd8], rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013f3a
add rdx, 0x27
mov qword [rsp + 0xd8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014100
call fcn.14003d1f0
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rcx, [rsp + 0x560]
call fcn.140014340
nop
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140013fd0
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xe0], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013fcb
add rdx, 0x27
mov qword [rsp + 0xe0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140014106
call fcn.14003d1f0
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov eax, ebx
jmp 0x140014096
mov qword [rsp + 0x20], r12
mov r9d, edi
mov r8, r15
mov rdx, r13
mov rcx, r14
call fcn.140003a80
mov ebx, eax
lea rcx, [rsp + 0x400]
call fcn.14000c400
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140014072
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0xe8], rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001406d
add rdx, 0x27
mov qword [rsp + 0xe8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001410b
call fcn.14003d1f0
mov qword [rsp + 0x3d0], rsi
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], si
mov eax, ebx
jmp 0x140014096
mov rcx, qword [rsp + 0x6a0]
xor rcx, rsp
call fcn.14003d1d0
add rsp, 0x6b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14004930c
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
nop
call fcn.14004930c
call fcn.14004930c
int3