Function at 0x1400197e5
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov qword [rsp + 0x48], rcx
mov r12, rdx
mov rbp, r8
mov rbx, r9
test rcx, rcx
je 0x140019d5c
mov r14, qword [sym.imp.msvcrt.dll_fprintf]
call r14
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140019d5c
mov rcx, rax
call fcn.1400797e8
mov rcx, qword [rsp + 0x30]
mov r8d, 0x5c
mov edx, 0x2f
mov rdi, rax
call fcn.1400197d6
mov rax, qword [0x1400b6330]
cmp dword [rax], 3
je 0x140019857
xor esi, esi
jmp 0x140019a16
cmp word [0x140100796], 0
jne 0x140019873
mov eax, 0xffff
shl rax, 0x18
and rax, qword [0x140100780]
je 0x140019850
cmp word [0x14010077c], 0
jne 0x140019850
cmp byte [0x14010078b], 0
jne 0x140019850
mov ax, word [0x140100772]
mov edx, eax
not edx
and dl, 7
je 0x140019850
mov edx, eax
not edx
test dl, 0x23
je 0x140019850
mov eax, edx
test ax, 0x1c0
je 0x140019850
mov al, byte [0x140100787]
or al, byte [0x140100420]
jne 0x140019850
mov rax, qword [0x1400b6990]
cmp qword [rax], 0
je 0x140019850
cmp byte [rbx + 3], 0
jne 0x1400198da
cmp byte [rbx + 4], 0
jne 0x1400198e3
cmp byte [rbx + 2], 0
je 0x140019850
jmp 0x1400198e3
lea rdx, str.linux
jmp 0x1400198ea
lea rdx, str.append
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea r9, str.persistent_file_cdrom_preseed
lea r8, str.file_cdrom_preseed
call fcn.140024509
test rax, rax
je 0x140019956
lea rcx, str.__Added_persistent_kernel_option
call fcn.140038472
cmp byte [rbx + 3], 0
je 0x140019991
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea r9, [0x14008f9b3]
lea r8, str.maybe_ubiquity
lea rdx, str.linux
call fcn.140024509
lea rcx, str.__Removed_maybe_ubiquity_kernel_option
test rax, rax
jne 0x14001998c
jmp 0x140019991
mov dword [rsp + 0x20], 1
lea rsi, str.linux
mov rcx, qword [rsp + 0x30]
lea r9, str._casper_vmlinuz_persistent
lea r8, str._casper_vmlinuz
mov rdx, rsi
call fcn.140024509
test rax, rax
je 0x140019998
lea rcx, str.__Added_persistent_kernel_option
call fcn.140038472
mov esi, 1
jmp 0x140019a16
cmp byte [rbx + 3], 0
lea rdx, str.append
je 0x1400199a8
mov rdx, rsi
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea r9, str.bootcasper_persistent
lea r8, str.bootcasper
call fcn.140024509
test rax, rax
jne 0x140019985
cmp byte [rbx + 3], 0
lea rdx, str.append
je 0x1400199e1
lea rdx, str.linux
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea r9, str.bootlive_persistence
lea r8, str.bootlive
call fcn.140024509
lea rcx, str.__Added_persistence_kernel_option
test rax, rax
jne 0x14001998c
jmp 0x140019850
cmp byte [rbx], 0
jne 0x140019a25
cmp byte [rbx + 1], 0
je 0x140019b9b
lea r8, str.x20
mov edx, 0x20
lea rcx, [0x140100220]
call fcn.140024a5f
lea r8, str.x20
mov edx, 0x20
lea rcx, [0x1401002e0]
mov qword [rsp + 0x38], rax
call fcn.140024a5f
cmp qword [rsp + 0x38], 0
mov qword [rsp + 0x40], rax
je 0x140019b87
test rax, rax
je 0x140019b87
lea r13, str.y_v_t_
xor r11d, r11d
lea r15, [r13 + 0x38]
mov r10, r13
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
mov dword [rsp + 0x5c], r11d
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
mov rdx, qword [r10]
mov qword [rsp + 0x50], r10
call fcn.140024509
mov r10, qword [rsp + 0x50]
mov r11d, dword [rsp + 0x5c]
test rax, rax
je 0x140019ac8
mov r11d, 1
mov esi, 1
add r10, 8
cmp r10, r15
jne 0x140019a85
test r11d, r11d
je 0x140019af1
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x38]
lea rcx, str.__Patched__s:__s___s
mov rdx, qword [rsp + 0x30]
call fcn.140038472
cmp byte [0x140100771], 0
je 0x140019b87
mov rax, qword [0x1400b67c0]
lea rdx, str.netinst
mov rcx, qword [rax]
call fcn.140079820
test rax, rax
jne 0x140019b87
xor r10d, r10d
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea r9, str.inst.repo
lea r8, str.inst.stage2
mov rdx, qword [r13]
mov dword [rsp + 0x50], r10d
call fcn.140024509
mov r10d, dword [rsp + 0x50]
test rax, rax
je 0x140019b5a
mov r10d, 1
mov esi, 1
add r13, 8
cmp r13, r15
jne 0x140019b1c
test r10d, r10d
je 0x140019b87
mov rdx, qword [rsp + 0x30]
lea r9, str.inst.repo
lea r8, str.inst.stage2
lea rcx, str.__Patched__s:__s___s
call fcn.140038472
mov rcx, qword [rsp + 0x38]
call fcn.1400796c8
mov rcx, qword [rsp + 0x40]
call fcn.1400796c8
cmp byte [rbx + 2], 0
je 0x140019c4a
mov rdx, qword [str._efi_boot]
test rdx, rdx
jne 0x140019bb8
lea rdx, [0x14008f76c]
test r12, r12
jne 0x140019bc4
lea r12, [0x14008f76c]
mov rcx, r12
mov r12, qword [sym.imp.msvcrt.dll_fread]
call r12
test eax, eax
jne 0x140019c4a
test rbp, rbp
jne 0x140019be1
lea rbp, [0x14008f76c]
lea rdx, str.isolinux.cfg
mov rcx, rbp
call r12
test eax, eax
jne 0x140019c4a
cmp byte [0x140100782], 0
jne 0x140019c4a
mov rcx, qword [rsp + 0x30]
call r14
mov rbp, rax
test rax, rax
je 0x140019c4a
mov rcx, qword [rsp + 0x30]
mov r8d, 1
mov rdx, rax
mov byte [rax + rdi - 0xc], 0x73
mov byte [rax + rdi - 0xb], 0x79
mov byte [rax + rdi - 0xa], 0x73
call qword [sym.imp.KERNEL32.DLL_CreateEventACreateFileA]
mov rdx, qword [rsp + 0x30]
lea rcx, str.Duplicated__s_to__s
mov r8, rbp
call fcn.140038472
mov rcx, rbp
call fcn.1400796c8
cmp byte [rbx + 3], 0
je 0x140019d27
mov ecx, 0x104
call fcn.140079730
mov ecx, 0x104
mov rdi, rax
call fcn.140079730
mov rbx, rax
test rdi, rdi
je 0x140019d17
test rax, rax
je 0x140019d17
lea rax, [0x140100220]
or r8, 0xffffffffffffffff
mov rcx, rdi
mov rbp, qword [sym.imp.msvcrt.dll_clearerr]
lea r9, str.cd9660:_dev_iso9660__s
mov edx, 0x104
mov qword [rsp + 0x20], rax
call rbp
lea rax, [0x1401002e0]
or r8, 0xffffffffffffffff
mov rcx, rbx
mov byte [rdi + 0x103], 0
lea r9, str.msdosfs:_dev_msdosfs__s
mov edx, 0x104
mov qword [rsp + 0x20], rax
call rbp
mov byte [rbx + 0x103], 0
mov r9, rbx
mov r8, rdi
mov dword [rsp + 0x20], 1
mov rcx, qword [rsp + 0x30]
lea rdx, [0x14008fb0d]
call fcn.140024509
test rax, rax
je 0x140019d17
mov rdx, qword [rsp + 0x30]
mov r9, rbx
mov r8, rdi
mov esi, 1
lea rcx, str.__Patched__s:__s___s
call fcn.140038472
mov rcx, rdi
call fcn.1400796c8
mov rcx, rbx
call fcn.1400796c8
test esi, esi
je 0x140019d42
mov rdx, qword [rsp + 0x48]
mov rcx, qword [0x1400b68d0]
mov r8d, 1
call fcn.140036cf3
mov rcx, qword [rsp + 0x30]
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400796c8
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret