Function at 0x1400d5500
Capabilities:
Check os version
Create process on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x5c8
mov rdi, qword [0x14022c040]
mov r12, qword [rsp + 0x630]
mov rax, qword [rdi]
mov qword [rsp + 0x5b8], rax
xor eax, eax
mov qword [rsp + 0x50], r9
mov rsi, rcx
mov rbx, rdx
mov r15, r8
mov rdi, rcx
test rcx, rcx
je 0x1400d5f88
cmp byte [rdi], 0x73
jne 0x1400d58a0
cmp byte [rdi + 1], 0x68
jne 0x1400d58a0
movzx ebp, byte [rdi + 2]
test ebp, ebp
jne 0x1400d58a0
mov eax, dword [0x1401e4824]
test eax, eax
js 0x1400d61f4
test eax, eax
je 0x1400d58e0
lea rbp, [0x1400d07e0]
mov rax, qword [sym.imp.msvcrt.dll__errno]
mov qword [rsp + 0x70], rax
call rax
mov r11d, dword [0x1401e4828]
mov dword [rax], 0
test r11d, r11d
js 0x1400d5f20
mov r10d, dword [0x140256bd4]
mov r13, qword [0x140256d78]
test r10d, r10d
jne 0x1400d55fc
test r13, r13
je 0x1400d55fc
mov dword [0x140256bd4], 1
jmp 0x1400d55df
mov byte [rax], 0
mov rcx, r13
lea r13, [rdi + 1]
call fcn.1400d2a40
mov edx, 0x2c
mov rcx, r13
call sub.msvcrt.dll_strchr
mov rdi, rax
test rax, rax
jne 0x1400d55d0
mov rcx, r13
call fcn.1400d2a40
mov dword [rsp + 0x28], pe_nt_image_headers64
xor r9d, r9d
mov r8d, 2
mov edx, 0x40000000
mov qword [rsp + 0x30], 0
lea rcx, [0x140205af6]
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [rsp + 0x6c], 0x408
cmp rax, 0xffffffffffffffff
je 0x1400d564f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x6c], 0x400
xor eax, eax
lea rdi, [rsp + 0x118]
mov ecx, 0xd
mov qword [rsp + 0x114], 0
mov qword [rsp + 0x178], 0
rep stosq qword [rdi], rax
mov dword [rsp + 0x110], 0x70
mov ecx, dword [rsp + 0x638]
call fcn.1400daac0
mov ecx, dword [rsp + 0x640]
mov qword [rsp + 0x160], rax
call fcn.1400daac0
mov ecx, dword [rsp + 0x648]
mov qword [rsp + 0x168], rax
call fcn.1400daac0
mov rdx, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x168]
mov qword [rsp + 0x170], rax
cmp rdx, 0xffffffffffffffff
je 0x1400d5f50
mov qword [rsp + 0x180], rdx
cmp rcx, 0xffffffffffffffff
je 0x1400d6070
mov dword [rsp + 0x98], 2
mov r8d, 1
cmp rdx, rcx
je 0x1400d61c1
cmp rax, 0xffffffffffffffff
mov qword [rsp + r8*8 + 0x180], rcx
setne r8b
cmp rax, rdx
setne dl
test r8b, dl
je 0x1400d5741
cmp rax, rcx
je 0x1400d5741
mov edi, dword [rsp + 0x98]
mov ecx, edi
add edi, 1
mov dword [rsp + 0x98], edi
mov qword [rsp + rcx*8 + 0x180], rax
or dword [rsp + 0x14c], 0x100
mov rdx, qword [rbx]
test rdx, rdx
je 0x1400d5c90
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400d5c90
xor r9d, r9d
mov word [rsp + 0x1a0], r9w
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1400d57bd
lea rsi, [rsp + 0x3b0]
mov r9d, 0xffffffff
mov r8d, 0x104
mov rcx, rsi
call fcn.1400d25c0
test eax, eax
js 0x1400d5cd0
xor r9d, r9d
mov r8d, 0x104
mov edx, eax
mov rcx, rsi
call fcn.1400d3b90
test eax, eax
js 0x1400d5ce0
lea rsi, [rsp + 0xd0]
xor edx, edx
mov rcx, rsi
call fcn.14008e880
test r12, r12
je 0x1400d582f
mov rcx, r12
call rbp
mov rcx, rax
mov rdi, rax
call sub.msvcrt.dll_strlen
mov rdx, rdi
mov rcx, rsi
mov r8, rax
call fcn.14008f5f0
cmp r12, rdi
je 0x1400d582f
mov rcx, rdi
call fcn.1400eaf30
jmp 0x1400d582f
mov rcx, rdi
call sub.msvcrt.dll_strlen
mov rdx, rdi
mov rcx, rsi
mov r8, rax
call fcn.14008f5f0
cmp qword [rbx], rdi
je 0x1400d582b
mov rcx, rdi
call fcn.1400eaf30
add rbx, 8
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400d5918
call rbp
mov rdi, rax
mov rax, qword [rsp + 0xe0]
cmp byte [rax], 0
je 0x1400d5808
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1400d58f0
mov rdx, qword [rsp + 0xd8]
sub rcx, rdx
cmp rcx, 1
je 0x1400d58f0
lea rcx, [rdx + 1]
mov qword [rsp + 0xd8], rcx
mov byte [rax + rdx], 0x20
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xd8]
mov byte [rdx + rax], 0
jmp 0x1400d5808
mov rcx, rdi
call sub.msvcrt.dll_strlen
cmp rax, 6
jbe 0x1400d58e0
lea rax, [rdi + rax - 7]
cmp dword [rax], 0x2e68735c
je 0x1400d6168
cmp dword [rax], 0x2e68732f
jne 0x1400d58e0
cmp dword [rax + 3], 0x6578652e
je 0x1400d6175
nop word cs:[rax + rax]
nop
lea rbp, [0x1400d04e0]
jmp 0x1400d5585
mov edx, 1
mov rcx, rsi
call fcn.14008e7e0
mov rax, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xd8]
jmp 0x1400d5873
lea rcx, str.GIT_STRACE_COMMANDS
call fcn.1400d3040
mov rbx, rax
test rax, rax
je 0x1400d59c1
mov edx, 1
lea rcx, str.strace.exe
call fcn.1400d3ed0
mov rdi, rax
test rax, rax
je 0x1400d6599
mov r9d, 0xffffffff
lea r12, [rsp + 0x1a0]
mov r8d, 0x104
mov rdx, rax
mov rcx, r12
call fcn.1400d25c0
test eax, eax
js 0x1400d6053
xor r9d, r9d
mov r8d, 0x104
mov edx, eax
mov rcx, r12
call fcn.1400d3b90
test eax, eax
js 0x1400d6063
mov rcx, rdi
call fcn.1400eaf30
cmp byte [rbx], 0x31
jne 0x1400d5fa0
cmp byte [rbx + 1], 0
jne 0x1400d5fa0
mov r9d, 7
lea r8, str.strace
xor edx, edx
mov rcx, rsi
call fcn.14008f410
mov r8, qword [rsp + 0xd8]
test r8, r8
js 0x1400d661c
lea rcx, [r8 + r8 + 1]
test rcx, rcx
js 0x1400d6619
add rcx, rcx
call fcn.1400bd0a0
mov rdx, qword [rsp + 0xe0]
mov r9d, 0xffffffff
mov rcx, rax
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xd8]
lea r8, [rax + rax + 1]
call fcn.1400d25c0
mov rcx, rsi
call fcn.14008e580
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov qword [rsp + 0x58], rax
test r15, r15
je 0x1400d5d18
mov rcx, qword [r15]
test rcx, rcx
je 0x1400d5d18
cmp qword [rsp + 0x58], 0
je 0x1400d6522
mov r12, qword [rsp + 0x58]
mov ebp, 1
xor esi, esi
xor r14d, r14d
movabs rdi, 0x1fffffffffffffff
xor ebx, ebx
jmp 0x1400d5ab4
add rbx, 1
cmp r14, rbx
jae 0x1400d5a9c
lea r14, [r14 + r14*2 + 0x30]
shr r14, 1
cmp r14, rbx
cmovb r14, rbx
cmp rdi, r14
jb 0x1400d65aa
mov rcx, rsi
lea rdx, [r14*8]
call fcn.1400bd2c0
mov rsi, rax
mov rcx, r12
call sub.msvcrt.dll_wcslen
mov qword [rsi + rbx*8 - 8], r12
add rax, 1
lea r12, [r12 + rax*2]
add rbp, rax
cmp word [r12], 0
jne 0x1400d5a68
mov rcx, qword [r15]
test rcx, rcx
je 0x1400d6396
lea rdi, [r15 + 8]
xor r13d, r13d
nop
call sub.msvcrt.dll_strlen
mov rcx, qword [rdi]
add rdi, 8
lea r13, [r13 + rax*2 + 1]
test rcx, rcx
jne 0x1400d5ad0
test r13, r13
js 0x1400d6600
lea r12, [r13 + r13]
mov rcx, r12
call fcn.1400bd0a0
cmp qword [r15], 0
mov qword [rsp + 0x78], rax
mov rdx, rax
je 0x1400d5b8d
mov rax, rbx
add r12, rdx
neg rax
lea rdi, [r15 + rax*8]
mov r15, rdx
nop
add rbx, 1
cmp r14, rbx
jae 0x1400d5b5e
movabs rax, 0x1fffffffffffffff
lea r14, [r14 + r14*2 + 0x30]
shr r14, 1
cmp r14, rbx
cmovb r14, rbx
cmp rax, r14
jb 0x1400d65aa
mov rcx, rsi
lea rdx, [r14*8]
call fcn.1400bd2c0
mov rsi, rax
mov r8, r12
mov rdx, qword [rdi + rbx*8 - 8]
mov rcx, r15
mov r9d, 0xffffffff
sub r8, r15
sar r8, 1
call fcn.1400d25c0
cmp qword [rdi + rbx*8], 0
mov qword [rsi + rbx*8 - 8], r15
cdqe
lea r15, [r15 + rax*2 + 2]
jne 0x1400d5b20
mov r8d, 8
lea r9, [fcn.1400cfd40]
mov rdx, rbx
mov rcx, rsi
call fcn.14008e030
mov r8, rbp
add r8, r13
js 0x1400d661c
lea rcx, [r8 + r8]
call fcn.1400bd0a0
mov rdi, rax
mov rbp, rax
test rbx, rbx
je 0x1400d5c30
xor r12d, r12d
nop dword [rax + rax]
lea r13, [rsi + r12*8]
jmp 0x1400d5bf3
lea r13, [r13 + 8]
mov rcx, r14
mov rdx, r13
call fcn.1400cfd40
test eax, eax
jne 0x1400d5c50
add r12, 1
mov r14, r13
cmp r12, rbx
jb 0x1400d5be0
mov rcx, qword [r13]
mov edx, 0x3d
call sub.msvcrt.dll_wcschr
test rax, rax
je 0x1400d5c30
mov rcx, qword [r14]
call sub.msvcrt.dll_wcslen
add rax, 1
mov r13, rax
jne 0x1400d5c70
add rbp, r13
cmp r12, rbx
jb 0x1400d5bd0
nop dword [rax + rax]
xor r8d, r8d
mov rcx, rsi
mov word [rbp], r8w
call fcn.1400eaf30
mov rcx, qword [rsp + 0x78]
call fcn.1400eaf30
jmp 0x1400d5d7a
mov rcx, qword [r14]
mov edx, 0x3d
call sub.msvcrt.dll_wcschr
test rax, rax
jne 0x1400d5c12
jmp 0x1400d5bd0
js 0x1400d6600
add r13, r13
mov rdx, qword [r14]
mov rcx, rbp
mov r8, r13
call sub.msvcrt.dll_memcpy
jmp 0x1400d5c23
mov r9d, 0xffffffff
lea rdi, [rsp + 0x1a0]
mov r8d, 0x104
mov rdx, rsi
mov rcx, rdi
call fcn.1400d25c0
test eax, eax
js 0x1400d5cd0
xor r9d, r9d
mov r8d, 0x104
mov edx, eax
mov rcx, rdi
call fcn.1400d3b90
test eax, eax
jns 0x1400d5774
jmp 0x1400d5ce0
mov rax, qword [rsp + 0x70]
call rax
cmp dword [rax], 0x22
je 0x1400d6289
mov rax, 0xffffffffffffffff
mov rsi, qword [0x14022c040]
mov rdx, qword [rsp + 0x5b8]
sub rdx, qword [rsi]
jne 0x1400d6614
add rsp, 0x5c8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x1400d619a
cmp word [rax], 0
mov rbx, rax
mov esi, 1
je 0x1400d619a
nop dword [rax + rax]
mov rcx, rbx
call sub.msvcrt.dll_wcslen
add rax, 1
lea rbx, [rbx + rax*2]
add rsi, rax
cmp word [rbx], 0
jne 0x1400d5d40
test rsi, rsi
js 0x1400d662d
lea rbx, [rsi + rsi]
mov rcx, rbx
call fcn.1400bd0a0
mov rdi, rax
test rsi, rsi
jne 0x1400d61ac
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov edx, dword [rsp + 0x98]
mov ecx, dword [0x1401e4828]
pxor xmm0, xmm0
mov qword [rsp + 0xc0], 0
test edx, edx
movups xmmword [rsp + 0xb0], xmm0
setne sil
test ecx, ecx
je 0x1400d5dbd
test sil, sil
jne 0x1400d609f
xor ebp, ebp
mov rdx, qword [rsp + 0x50]
lea rax, [rsp + 0x3b0]
test rdx, rdx
cmove rax, rdx
xor ecx, ecx
cmp word [rsp + 0x1a0], 0
mov qword [rsp + 0x50], rax
movzx eax, sil
je 0x1400d5df1
lea rcx, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
xor r8d, r8d
lea r15, [rsp + 0xb0]
lea r13, [rsp + 0x110]
mov dword [rsp + 0x20], eax
mov r12, qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov qword [rsp + 0x38], rdx
mov edx, dword [rsp + 0x6c]
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r13
call r12
mov ebx, eax
test eax, eax
jne 0x1400d5e71
mov eax, dword [0x1401e4828]
test eax, eax
je 0x1400d5e54
test sil, sil
jne 0x1400d629b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov rax, qword [rsp + 0x70]
call rax
mov ecx, r12d
mov rsi, rax
call fcn.1400d0b80
mov dword [rsi], eax
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x1400d5e84
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
test rbp, rbp
je 0x1400d5e9d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, rdi
call fcn.1400eaf30
mov rcx, qword [rsp + 0x60]
call fcn.1400eaf30
test ebx, ebx
je 0x1400d5ce0
lea rbx, [0x140255ec0]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, 0x18
call fcn.1400bd0a0
mov rdx, qword [rsp + 0xb0]
mov esi, dword [rsp + 0xc0]
mov rcx, rbx
mov qword [rax + 0x10], rdx
mov rdx, qword [0x140256d20]
mov qword [rax + 8], rsi
mov qword [rax], rdx
mov qword [0x140256d20], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rsp + 0xc0]
jmp 0x1400d5ce7
mov eax, dword [0x1401e4958]
mov dword [0x1401e4828], eax
test eax, eax
jns 0x1400d55a9
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x1db0ffff
seta al
movzx eax, al
mov dword [0x1401e4828], eax
jmp 0x1400d55a9
mov dword [rsp + 0x98], 1
xor r8d, r8d
cmp rcx, 0xffffffffffffffff
jne 0x1400d5706
xor ecx, ecx
cmp rax, 0xffffffffffffffff
jne 0x1400d5739
mov dword [rsp + 0x98], 0
jmp 0x1400d574c
mov rdi, qword [rdx]
test rdi, rdi
jne 0x1400d5549
lea rbp, [0x1400d04e0]
jmp 0x1400d5585
mov rdi, qword [sym.imp.msvcrt.dll__stricmp]
mov rdx, rbx
lea rcx, [0x1402056dc]
call rdi
test eax, eax
je 0x1400d59aa
mov rdx, rbx
lea rcx, [0x140205b3f]
call rdi
test eax, eax
je 0x1400d59aa
mov rcx, rbx
call rbp
lea rdx, str.strace__o__s
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 0
mov rdi, rax
mov rax, qword [0x14022c910]
mov r8, rdi
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0xf0]
mov rcx, rax
mov qword [rsp + 0x58], rax
call fcn.14008fc00
cmp rbx, rdi
je 0x1400d602a
mov rcx, rdi
call fcn.1400eaf30
mov r9, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
mov rcx, rsi
xor edx, edx
call fcn.14008f410
mov rcx, qword [rsp + 0x58]
call fcn.14008e580
jmp 0x1400d59c1
mov rax, qword [rsp + 0x70]
call rax
cmp dword [rax], 0x22
je 0x1400d63a1
mov rcx, rdi
call fcn.1400eaf30
jmp 0x1400d5ce0
cmp rax, 0xffffffffffffffff
je 0x1400d608f
mov dword [rsp + 0x98], 2
mov ecx, 1
cmp rax, rdx
jne 0x1400d5739
mov dword [rsp + 0x98], 1
jmp 0x1400d5741
lea r12, [rsp + 0xa8]
xor r8d, r8d
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
mov r9, r12
mov edx, 1
call rbx
test eax, eax
jne 0x1400d60d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400d5dbd
mov rbp, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov r8, rbp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbp, rax
test rax, rax
je 0x1400d5dbd
xor r8d, r8d
mov r9, r12
mov edx, 1
mov rcx, rax
call rbx
test eax, eax
je 0x1400d5dbf
mov eax, dword [rsp + 0x98]
xor edx, edx
mov rcx, rbp
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
lea r9, [rsp + 0x180]
mov r8d, 0x20002
shl rax, 3
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x1400d5dbf
or dword [rsp + 0x6c], 0x80000
mov qword [rsp + 0x178], rbp
jmp 0x1400d5dbf
cmp dword [rax + 3], 0x6578652e
jne 0x1400d58bf
mov rdx, qword [0x140256bd8]
test rdx, rdx
je 0x1400d6507
mov rcx, rdi
call fcn.1400db320
test eax, eax
je 0x1400d557e
jmp 0x1400d58e0
mov ecx, 2
mov ebx, 2
call fcn.1400bd0a0
mov rdi, rax
mov rdx, qword [rsp + 0x58]
mov r8, rbx
mov rcx, rdi
call sub.msvcrt.dll_memcpy
jmp 0x1400d5d7a
mov dword [rsp + 0x98], 1
cmp rax, 0xffffffffffffffff
je 0x1400d5741
cmp rax, rdx
je 0x1400d5741
mov dword [rsp + 0x98], 2
mov ecx, 1
jmp 0x1400d5739
mov rcx, rdi
xor edx, edx
call fcn.1400d3ed0
mov rdi, rax
test rax, rax
je 0x1400d6387
mov rcx, rax
call sub.msvcrt.dll_strlen
cmp rax, 6
jbe 0x1400d6270
movsx edx, byte [rdi + rax - 7]
lea r13, [rax - 7]
cmp edx, 0x2f
je 0x1400d622b
cmp edx, 0x5c
jne 0x1400d6270
lea rcx, [rdi + rax - 6]
mov r8d, 6
lea rdx, str.sh.exe
call fcn.1400db220
test eax, eax
je 0x1400d626b
jmp 0x1400d6270
movsx eax, byte [rdi + r13 - 1]
lea rdx, [r13 - 1]
cmp eax, 0x2f
je 0x1400d6268
cmp eax, 0x5c
jne 0x1400d6533
mov r13, rdx
test r13, r13
jne 0x1400d6250
mov rcx, rdi
mov dword [0x1401e4824], ebp
call fcn.1400eaf30
mov eax, dword [0x1401e4824]
jmp 0x1400d5576
mov rax, qword [rsp + 0x70]
call rax
mov dword [rax], 0x26
jmp 0x1400d5ce0
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x78], rax
call rax
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 0
mov esi, eax
mov rax, qword [0x14022c910]
mov qword [rsp + 0x100], rax
cmp esi, 0x5aa
je 0x1400d62fb
cmp esi, 0x57
je 0x1400d63b3
lea rbx, str.SUPPRESS_HANDLE_INHERITANCE_WARNING
mov rcx, rbx
call fcn.1400d3040
test rax, rax
je 0x1400d63e1
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x58], rax
mov dword [0x1401e4828], 0
mov eax, dword [rsp + 0x6c]
xor ecx, ecx
and eax, 0xfff7ffff
cmp word [rsp + 0x1a0], 0
je 0x1400d6330
lea rcx, [rsp + 0x1a0]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x48], r15
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
call r12
mov ebx, eax
test eax, eax
je 0x1400d64e4
cmp qword [rsp + 0xf8], 0
jne 0x1400d63c9
mov rcx, qword [rsp + 0x58]
call fcn.14008e580
jmp 0x1400d5e71
mov dword [0x1401e4824], 0
jmp 0x1400d58e0
xor r12d, r12d
xor r13d, r13d
jmp 0x1400d5af4
mov rax, qword [rsp + 0x70]
call rax
mov dword [rax], 0x26
jmp 0x1400d6063
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x23efffff
ja 0x1400d62e3
jmp 0x1400d62fb
mov r8, qword [rsp + 0x100]
mov edx, esi
lea rcx, str.failed_to_restrict_file_handles___ld__n_n_s
call fcn.1400b6cc0
jmp 0x1400d6378
mov rcx, rbx
xor ebx, ebx
mov r8d, 1
mov dword [rsp + 0xa4], 0
lea rdx, [0x140205b9c]
call fcn.1400de2f0
lea rax, [rsp + 0xf0]
lea r11, [rsp + 0x180]
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xa4]
mov r15, r12
mov r12d, esi
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x90], r13
mov r13, rdi
mov rdi, r11
mov r14, qword [rdi + rbx*8]
mov r8d, dword [rsp + 0xa4]
mov rdx, qword [rsp + 0x80]
mov dword [rsp + 0x9c], r8d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetHandleInformation]
mov rcx, r14
mov esi, eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov r8d, dword [rsp + 0x9c]
mov dword [rsp + 0x28], esi
mov r9, r14
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x58]
lea rdx, str.handle__d:__p__type__lx__handle_info___d___lx_n
mov dword [rsp + 0x30], r8d
mov r8d, ebx
add rbx, 1
call fcn.14008fc00
mov eax, dword [rsp + 0x98]
cmp ebx, eax
jb 0x1400d6444
mov rcx, qword [rsp + 0x58]
mov r8d, 0xbd
mov esi, r12d
mov rdi, r13
lea rdx, str._nThis_is_a_bug__please_report_it_at_nhttps:__github.com_git_for_windows_git_issues_new_n_nTo_suppress_this_warning__please_set_the_environment_variable_n_n_tSUPPRESS_HANDLE_INHERITANCE_WARNING1_n
mov r12, r15
mov r13, qword [rsp + 0x90]
mov r15, qword [rsp + 0x88]
call fcn.14008f5f0
jmp 0x1400d6308
mov rax, qword [rsp + 0x78]
call rax
mov r12d, eax
mov rax, qword [rsp + 0x70]
call rax
mov ecx, r12d
mov rsi, rax
call fcn.1400d0b80
mov dword [rsi], eax
jmp 0x1400d6378
lea rcx, [0x140205833]
call fcn.1400d3ed0
mov qword [0x140256bd8], rax
mov rdx, rax
jmp 0x1400d6185
xor esi, esi
mov ebp, 1
xor r14d, r14d
xor ebx, ebx
jmp 0x1400d5ac8
cmp r13, 3
jbe 0x1400d6270
movsx eax, byte [rdi + r13 - 4]
lea r14, [r13 - 4]
cmp eax, 0x2f
je 0x1400d6555
cmp eax, 0x5c
jne 0x1400d6270
lea rcx, [rdi + r13 - 3]
mov r8d, 3
lea rdx, [0x140205add]
call fcn.1400db220
test eax, eax
je 0x1400d658f
jmp 0x1400d6270
movsx eax, byte [rdi + r14 - 1]
lea rdx, [r14 - 1]
cmp eax, 0x2f
je 0x1400d658c
cmp eax, 0x5c
jne 0x1400d65be
mov r14, rdx
test r14, r14
jne 0x1400d6578
jmp 0x1400d6270
lea rcx, str.strace_not_found_
call fcn.1400b6bf0
jmp 0x1400d5ce0
mov r8, r14
mov edx, 8
lea rcx, [0x140205b58]
call fcn.1400b6950
cmp r14, 3
jbe 0x1400d6270
movsx eax, byte [rdi + r14 - 4]
cmp eax, 0x2f
je 0x1400d65dc
cmp eax, 0x5c
jne 0x1400d6270
lea rcx, [rdi + r14 - 3]
mov r8d, 3
lea rdx, [0x140205ae1]
xor ebp, ebp
call fcn.1400db220
test eax, eax
sete bpl
jmp 0x1400d6270
mov r8, r13
mov edx, 2
lea rcx, [0x140205b58]
call fcn.1400b6950
call fcn.1401d96b0
mov r8, rcx
mov edx, 2
lea rcx, [0x140205b58]
call fcn.1400b6950
mov r8, rsi
mov edx, 2
lea rcx, [0x140205b58]
call fcn.1400b6950
nop
nop word cs:[rax + rax]
nop dword [rax]