Function at 0x14001a0b0
Capabilities:
Copy file
Create directory

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4c0
lea rbp, [rsp + 0x80]
and rbp, 0xffffffffffffffc0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov ebx, 1
mov qword [rbp + 0x28], rdx
mov rdi, rdx
mov dword [rbp], ebx
mov rdx, qword [0x1401d0d80]
mov r14, rcx
mov qword [rbp + 0x38], rcx
xor r15d, r15d
mov qword [rbp + 8], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], r15b
jne 0x14001a113
lea rcx, [rbp + 0x180]
add rax, rcx
mov ecx, 0x10000
mov qword [rbp + 0x58], rax
call fcn.1400e9094
xor esi, esi
mov qword [rbp + 0x40], rax
test r14, r14
je 0x14001b0b9
test rdi, rdi
je 0x14001b0b9
test rax, rax
je 0x14001b0b9
mov rax, qword [0x1401d0d80]
lea r9, str._s_s_
mov qword [rsp + 0x28], rdi
lea r8, [rsi - 1]
mov edx, 0x104
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x180]
call fcn.140004960
test eax, eax
js 0x14001b090
cdqe
lea r13, [rbp + 0x180]
add r13, rax
mov qword [rbp + 0x60], rax
mov rdx, rdi
mov qword [rbp + 0x48], r13
mov rcx, r14
call fcn.140073b80
mov qword [rbp + 0x30], rax
mov rsi, rax
test rax, rax
jne 0x14001a1dc
mov rdx, rdi
lea rcx, str.Could_not_access_directory__s
call fcn.14004f910
inc qword [0x1401954e0]
mov rcx, r15
call fcn.1400e9080
mov rcx, qword [rbp + 0x40]
jmp 0x14001b0bc
cmp byte [rdi], r15b
jne 0x14001a1f7
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
mov edx, ebx
lea ecx, [r9 - 1]
call fcn.140066e30
mov rsi, qword [rsi + 8]
mov qword [rbp + 0x50], rsi
test rsi, rsi
je 0x14001a447
nop dword [rax + rax]
cmp dword [0x14019f0a0], 0
jne 0x14001b07e
test rsi, rsi
je 0x14001a226
mov rsi, qword [rsi + 0x10]
cmp dword [0x1401d0c44], 0
mov qword [rbp + 0x20], rsi
mov dword [rbp + 0x14], 0
je 0x14001a258
cmp dword [rsi], 1
jne 0x14001a258
cmp dword [0x1401944a8], 0
je 0x14001a258
test dword [rsi + 0xae], 0x200
jne 0x14001afdf
lea r12, [rsi + 0xfd]
xor r15d, r15d
cmp byte [r12], 0x2e
jne 0x14001a28e
cmp byte [r12 + 1], r15b
je 0x14001afb4
cmp byte [r12], 0x2e
jne 0x14001a28e
cmp byte [r12 + 1], 0x2e
jne 0x14001a28e
cmp byte [r12 + 2], r15b
je 0x14001afb4
xor ebx, ebx
cmp dword [rsi], 1
mov dword [rbp + 0x10], ebx
jne 0x14001a323
cmp dword [0x1401944a8], ebx
je 0x14001a323
test r12, r12
jne 0x14001a2ad
xor eax, eax
jmp 0x14001a2bd
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], bl
jne 0x14001a2b4
inc rax
mov ebx, 0x103
sub rbx, qword [rbp + 0x60]
mov rdx, r12
cmp rax, rbx
mov rcx, r13
cmovb rbx, rax
mov r8, rbx
call fcn.1401362c0
mov byte [rbx + r13 - 1], r15b
test r12, r12
je 0x14001a306
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [r12 + rax], r15b
jne 0x14001a2f0
cmp rax, 0x40
jbe 0x14001a306
mov byte [0x1401e8fda], 1
mov rax, qword [rsi + 0x1d]
xor ebx, ebx
test rax, rax
setne bl
mov dword [rbp + 0x10], ebx
test rax, rax
je 0x14001a336
mov byte [0x1401e8fd8], 1
jmp 0x14001a336
movzx r8d, byte [0x1401d055c]
mov rdx, r13
mov rcx, r12
call fcn.1400749e0
cmp dword [rsi + 0xf8], 2
jne 0x14001a4a2
cmp dword [0x1401d0c44], r15d
jne 0x14001a42a
lea rcx, [rbp + 0x180]
call fcn.1400fcc44
mov rbx, rax
test rax, rax
jne 0x14001a45c
lea rcx, str.Could_not_allocate_string_for_sanitized_path
call fcn.14004f910
mov rcx, rbx
call fcn.140017520
mov rcx, rax
mov rdi, rax
call fcn.1401049a4
test rdi, rdi
je 0x14001a394
mov rcx, rdi
call fcn.1400e9080
cmp dword [0x14019f538], r15d
je 0x14001a422
lea rcx, [rsi + 0xb4]
call fcn.140107ff4
movsxd r8, dword [0x1401d0c40]
lea rdx, [0x140000000]
lea r10, [rdx + 0x1d0da0]
movabs rcx, 0x2b6109100
lea r10, [r10 + r8*8]
add rax, rcx
imul rcx, rax, 0x989680
lea eax, [r8 + 1]
mov qword [0x1401d0d88], r10
movsxd r8, eax
mov r9, r10
mov dword [r10], ecx
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
sar rcx, 0x20
shr rdx, 1
mov dword [r10 + 4], ecx
mov rcx, rbx
lea rax, [rdx + rdx*2]
mov rdx, r10
sub r8, rax
mov dword [0x1401d0c40], r8d
mov r8, r10
call fcn.140019460
mov rcx, rbx
call fcn.1400e9080
mov rdx, qword [rbp + 0x58]
mov rcx, r14
call fcn.14001a0b0
mov dword [rbp], eax
test eax, eax
jg 0x14001b00f
jns 0x14001afb0
xor ebx, ebx
mov rsi, qword [rbp + 8]
cmp rsi, 0xffffffffffffffff
je 0x14001b08c
jmp 0x14001b04e
lea rdx, [rax + 2]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r15b
jne 0x14001a467
mov rcx, rdx
sub rcx, rbx
cmp rcx, rax
jae 0x14001a374
movzx eax, byte [rdx]
cmp al, 0x2a
je 0x14001a49a
cmp al, 0x3f
je 0x14001a49a
cmp al, 0x3c
je 0x14001a49a
cmp al, 0x3e
je 0x14001a49a
cmp al, 0x3a
je 0x14001a49a
cmp al, 0x7c
jne 0x14001a49d
mov byte [rdx], 0x5f
inc rdx
jmp 0x14001a460
mov r13, qword [rsi + 0xe0]
lea rax, [rbp + 0x68]
mov r8, qword [rbp + 0x48]
lea r9, [rbp + 0x180]
mov rdx, r13
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.140017b60
test eax, eax
je 0x14001a624
test ebx, ebx
je 0x14001afb4
test r13, r13
jne 0x14001afb4
lea rdx, str._firmware
mov rcx, rdi
call fcn.140113960
test eax, eax
jne 0x14001a57b
mov rax, qword [rsi + 0x1d]
lea r9, [0x14015ba6c]
mov qword [rsp + 0x28], rax
lea r8, [r13 - 1]
mov edx, 0x100
mov qword [rsp + 0x20], rdi
lea rcx, [rbp + 0x2b0]
call fcn.140004960
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], r15b
mov rcx, r14
call fcn.140073570
mov rbx, rax
test rax, rax
je 0x14001afb4
mov rax, qword [rax + 0xe0]
mov rcx, qword [rbx + 0x1d]
add rax, 0x7ff
shr rax, 0xb
add qword [0x1401d0d98], rax
test rcx, rcx
je 0x14001a56e
call fcn.1400e9080
mov qword [rbx + 0x1d], r15
mov rcx, rbx
call fcn.1400e9080
jmp 0x14001afb4
xor ecx, ecx
lea rdx, str.live
movzx eax, byte [r12 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x14001afb4
cmp rcx, 5
jne 0x14001a584
movzx eax, byte [rsi + 0x1d]
lea r8, str.casper
xor edx, edx
or rdx, rax
movzx eax, byte [rsi + 0x1e]
shl rax, 8
or rdx, rax
movzx eax, byte [rsi + 0x1f]
shl rax, 0x10
or rdx, rax
movzx eax, byte [rsi + 0x20]
shl rax, 0x18
or rdx, rax
movzx eax, byte [rsi + 0x21]
shl rax, 0x20
or rdx, rax
movzx eax, byte [rsi + 0x22]
shl rax, 0x28
or rdx, rax
movzx eax, byte [rsi + 0x23]
shl rax, 0x30
or rdx, rax
movzx eax, byte [rsi + 0x24]
shl rax, 0x38
or rdx, rax
xor ecx, ecx
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x14001afb4
cmp rcx, 7
jne 0x14001a600
mov byte [0x1401e8fe9], 1
jmp 0x14001afb4
test ebx, ebx
jne 0x14001a637
mov rdx, r13
lea rcx, [rbp + 0x180]
call fcn.140019080
xor edi, edi
nop dword [rax]
cmp byte [rbp + rdi + 0x6d], 0
je 0x14001a720
lea rax, [0x140000000]
cmp dword [rax + rdi*4 + 0x19f540], 0
je 0x14001a720
mov rax, qword [rax + rdi*8 + 0x1500c8]
lea r9, str._s_syslinux__s__s
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x3b0]
lea rax, [0x140196f48]
mov edx, 0x80
mov qword [rsp + 0x28], rax
mov r8, 0xffffffffffffffff
lea rax, [0x1401569ec]
mov qword [rsp + 0x20], rax
call fcn.140004960
lea rcx, [rbp + 0x3b0]
mov byte [rbp + 0x42f], 0
call fcn.140017520
lea rcx, [rbp + 0x180]
mov rsi, rax
call fcn.140017520
xor r8d, r8d
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
test rsi, rsi
je 0x14001a6f1
mov rcx, rsi
call fcn.1400e9080
test rbx, rbx
je 0x14001a6fe
mov rcx, rbx
call fcn.1400e9080
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetLastError]
test r14d, r14d
jne 0x14001a732
call fcn.140050120
mov rdx, rax
lea rcx, str.__Could_not_replace_file:__s
call fcn.14004f910
inc rdi
cmp rdi, 2
jb 0x14001a640
jmp 0x14001a7b4
lea r8, [rbp + 0x290]
mov ecx, 2
lea rdx, [rbp + 0x3b0]
call fcn.140047970
test eax, eax
je 0x14001a787
xor ebx, ebx
lea rax, [0x140197810]
movsxd rdx, ebx
add rdx, rax
lea rcx, [rbp + 0x290]
mov r8d, 0x20
call fcn.140136d00
test eax, eax
je 0x14001a782
add ebx, 0x20
cmp ebx, 0xbe0
jb 0x14001a750
xor eax, eax
jmp 0x14001a787
mov eax, 1
test eax, eax
lea rdx, [0x1401589b4]
lea rax, [0x1401589b0]
cmovne rdx, rax
lea rcx, str.__Replaced_with_local_version__s
call fcn.14004f910
xor r15d, r15d
cmp rdi, 2
jb 0x14001afb0
lea rcx, [rbp + 0x180]
mov ebx, 1
call fcn.1400fcc44
mov r15, rax
test rax, rax
jne 0x14001a7db
lea rcx, str.Could_not_allocate_string_for_sanitized_path
call fcn.14004f910
jmp 0x14001a854
lea rdx, [rax + 2]
nop
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x14001a7f0
mov rax, rdx
sub rax, r15
cmp rax, rcx
jae 0x14001a841
movzx eax, byte [rdx]
cmp al, 0x2a
je 0x14001a82d
cmp al, 0x3f
je 0x14001a82d
cmp al, 0x3c
jne 0x14001a834
mov byte [rdx], 0x5f
xor ebx, ebx
mov al, 0x5f
cmp al, 0x3a
je 0x14001a823
cmp al, 0x7c
jne 0x14001a828
xor ebx, ebx
mov byte [rdx], 0x5f
inc rdx
jmp 0x14001a7e0
mov byte [rdx], 0x5f
xor ebx, ebx
mov al, 0x5f
cmp al, 0x3e
jne 0x14001a81b
mov byte [rdx], 0x5f
xor ebx, ebx
mov al, 0x5f
jmp 0x14001a81f
test ebx, ebx
jne 0x14001a854
mov rdx, r15
lea rcx, str.__File_name_sanitized_to__s
call fcn.14004f910
mov edi, dword [rbp + 0x10]
mov ebx, 1
test edi, edi
je 0x14001abfd
cmp dword [0x1401e86fc], 2
jne 0x14001aa3b
mov r12, qword [rbp + 0x20]
lea r9, [0x14015ba6c]
mov edx, 0x100
lea rcx, [rbp + 0x2b0]
mov r8, 0xffffffffffffffff
mov rax, qword [r12 + 0x1d]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x20], rax
call fcn.140004960
mov rcx, qword [rbp + 0x38]
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], 0
call fcn.140073570
mov r14, rax
test rax, rax
je 0x14001aa2b
movzx ecx, byte [rbp + 0x180]
lea rax, [rbp + 0x180]
test cl, cl
je 0x14001a8f3
nop dword [rax]
cmp cl, 0x2f
jne 0x14001a8e8
mov byte [rax], 0x5c
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001a8e0
mov rax, qword [r12 + 0x1d]
test rax, rax
je 0x14001a917
movzx ecx, byte [rax]
test cl, cl
je 0x14001a917
cmp cl, 0x2f
jne 0x14001a90c
mov byte [rax], 0x5c
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001a904
cmp dword [r14 + 0xf8], 2
lea rax, [0x140156078]
mov r9, qword [r12 + 0x1d]
lea r8, [0x14015644e]
cmove r8, rax
lea rdx, [rbp + 0x180]
lea rcx, str.Symlinking:__s_s___s
call fcn.14004f910
mov rbx, qword [r12 + 0x1d]
lea rcx, [rbp + 0x180]
xor edi, edi
cmp dword [r14 + 0xf8], 2
sete dil
call fcn.140017520
mov rcx, rbx
mov rsi, rax
call fcn.140017520
mov r8d, edi
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateSymbolicLinkW]
movzx edi, al
test rbx, rbx
je 0x14001a995
mov rcx, rbx
call fcn.1400e9080
test rsi, rsi
je 0x14001a9a2
mov rcx, rsi
call fcn.1400e9080
test dil, dil
jne 0x14001a9bb
call fcn.140050120
mov rdx, rax
lea rcx, str.__Could_not_create_symlink:__s
call fcn.14004f910
mov rax, qword [r12 + 0x1d]
test rax, rax
je 0x14001a9e3
movzx ecx, byte [rax]
test cl, cl
je 0x14001a9e3
nop dword [rax]
cmp cl, 0x5c
jne 0x14001a9d8
mov byte [rax], 0x2f
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001a9d0
movzx ecx, byte [rbp + 0x180]
lea rax, [rbp + 0x180]
test cl, cl
je 0x14001aa08
cmp cl, 0x5c
jne 0x14001a9fd
mov byte [rax], 0x2f
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001a9f5
mov rcx, qword [r14 + 0x1d]
test rcx, rcx
je 0x14001aa1e
call fcn.1400e9080
mov qword [r14 + 0x1d], 0
mov rcx, r14
call fcn.1400e9080
mov edi, dword [rbp + 0x10]
xor ebx, ebx
xor r14d, r14d
test ebx, ebx
je 0x14001af5f
jmp 0x14001ac05
test r13, r13
jne 0x14001abdc
test r12, r12
lea rcx, str._NULL_
lea rdx, str.syslinux
cmovne rcx, r12
call fcn.140108174
mov r12, qword [rbp + 0x20]
test eax, eax
jne 0x14001aaff
mov rax, qword [r12 + 0x1d]
lea rcx, str._NULL_
test rax, rax
lea rdx, str.isolinux
cmovne rcx, rax
call fcn.140108174
test eax, eax
jne 0x14001aaff
lea rcx, [rbp + 0x180]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14001aaa0
inc rax
lea rsi, [0x1401d0c50]
mov ebx, 0x104
lea rdx, [rbp + 0x180]
cmp rax, rbx
mov rcx, rsi
cmovb rbx, rax
mov r8, rbx
call fcn.1401362c0
mov rdx, r13
mov byte [rbx + rsi - 1], 0
lea rcx, [rbp + 0x180]
call fcn.140019080
mov rdx, qword [r12 + 0x1d]
lea rcx, str.__Found_Rock_Ridge_symbolic_link_to__s
mov r14d, dword [rbp + 0x14]
call fcn.14004f910
jmp 0x14001ac05
mov rbx, qword [rbp + 0x28]
lea rdx, str._firmware
mov rcx, rbx
call fcn.140113960
test eax, eax
mov rax, qword [r12 + 0x1d]
jne 0x14001ab98
mov qword [rsp + 0x28], rax
lea r9, [0x14015ba6c]
mov edx, 0x100
mov qword [rsp + 0x20], rbx
mov r8, 0xffffffffffffffff
lea rcx, [rbp + 0x2b0]
call fcn.140004960
mov rcx, qword [rbp + 0x38]
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], 0
call fcn.140073570
mov r12, rax
test rax, rax
je 0x14001b016
mov r13, qword [rax + 0xe0]
lea rcx, [rbp + 0x180]
mov rdx, r13
mov r14d, 1
call fcn.140019080
lea rcx, str.__Duplicated_from__s
lea rdx, [rbp + 0x2b0]
call fcn.14004f910
jmp 0x14001ac05
test rax, rax
jne 0x14001aba1
xor edx, edx
jmp 0x14001abb9
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x14001abb0
lea rcx, [rbp + 0x180]
call fcn.140019080
mov rdx, qword [r12 + 0x1d]
lea rcx, str.__Ignoring_Rock_Ridge_symbolic_link_to__s
mov r14d, dword [rbp + 0x14]
call fcn.14004f910
jmp 0x14001ac05
cmp dword [0x1401e8840], 0
je 0x14001af5f
mov rdx, r13
lea rcx, str.Unexpected_symlink_length:__d
call fcn.14004f910
jmp 0x14001af5f
mov r14d, dword [rbp + 0x14]
mov r12, qword [rbp + 0x20]
mov rcx, r15
mov qword [rsp + 0x30], r13
call fcn.1400510c0
mov qword [rbp + 8], rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14001ac7e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call fcn.140050120
mov rdx, rax
lea rcx, str.__Unable_to_create_file:__s
call fcn.14004f910
lea ecx, [rbx - 5]
cmp ecx, 1
ja 0x14001b089
lea rdx, [r15 + 3]
test rdx, rdx
lea rcx, str._NULL_
cmovne rcx, rdx
lea rdx, str.autorun.inf
call fcn.140113960
test eax, eax
jne 0x14001b089
lea rcx, str.__NOTE:_This_is_usually_caused_by_a_poorly_designed_security_solution._See_https:__bit.ly_40qDtyF._r_n__This_file_will_be_skipped_for_now__but_you_should_really_look_into_using_a_SMARTER_antivirus_solution.
call fcn.14004f910
jmp 0x14001ae93
test edi, edi
je 0x14001ace1
mov rdx, qword [r12 + 0x1d]
test rdx, rdx
jne 0x14001ac91
xor r8d, r8d
jmp 0x14001acaa
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14001aca0
lea r9, [rbp + 0x18]
mov rcx, rax
call fcn.140050f30
inc qword [0x1401954e0]
mov dword [rbp], eax
test eax, eax
jne 0x14001ae93
call fcn.140050120
mov rdx, rax
lea rcx, str.__Error_writing_file:__s
call fcn.14004f910
jmp 0x14001b04b
cmp qword [0x1401d0de0], 0
je 0x14001acf7
lea rcx, [rbp + 0x80]
call fcn.140042070
xor esi, esi
test r13, r13
jle 0x14001ae36
cmp dword [0x14019f0a0], 0
jne 0x14001b047
mov ebx, dword [r12 + 0xd8]
lea rax, [r13 + 0x7ff]
mov rcx, qword [rbp + 0x38]
cqo
and edx, 0x7ff
mov word [rsp + 0x20], 0x800
add rax, rdx
add ebx, esi
mov rdx, qword [rbp + 0x40]
mov r8d, ebx
sar rax, 0xb
mov rdi, rax
cmp rax, 0x20
mov eax, 0x20
cmovg rdi, rax
mov r9d, edi
call fcn.140072150
movsxd rcx, eax
mov rax, rdi
shl rax, 0xb
cmp rcx, rax
jne 0x14001b069
mov ebx, 0x10000
cmp r13, rbx
cmovb ebx, r13d
cmp qword [0x1401d0de0], 0
je 0x14001ad95
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x80]
mov r8d, ebx
call fcn.140047330
mov rdx, qword [rbp + 0x40]
lea r9, [rbp + 0x18]
mov rcx, qword [rbp + 8]
mov r8d, ebx
call fcn.140050f30
inc qword [0x1401954e0]
mov dword [rbp], eax
test eax, eax
je 0x14001b033
mov eax, dword [rbp + 0x18]
cmp eax, ebx
jne 0x14001b02a
mov r8, qword [0x1401d0dc8]
sub r13, rax
add r8, rdi
mov rax, r8
mov qword [0x1401d0dc8], r8
sub rax, qword [0x1401d0d58]
cmp rax, 0x80
jb 0x14001ae2a
xor r9d, r9d
mov dword [rsp + 0x20], 0
cmp dword [0x1401e86fc], 2
mov edx, 0xc9f
mov ecx, 7
cmovne r9, qword [0x1401d0d98]
add r9, qword [0x1401d0dc0]
call fcn.140066e30
mov rax, qword [0x1401d0dc8]
mov qword [0x1401d0d58], rax
add rsi, rdi
test r13, r13
jg 0x14001ad02
cmp qword [0x1401d0de0], 0
je 0x14001ae8f
lea rcx, [rbp + 0x80]
call fcn.140047880
xor ebx, ebx
nop
movzx r8d, byte [rbp + rbx + 0x80]
lea rdx, str._02x
mov rcx, qword [0x1401d0de0]
call fcn.140001060
inc rbx
cmp rbx, 0x10
jb 0x14001ae50
mov rcx, qword [0x1401d0de0]
lea r8, [rbp + 0x183]
lea rdx, str.__.__s_n
call fcn.140001060
mov rsi, qword [rbp + 8]
cmp dword [0x14019f538], 0
je 0x14001af3a
lea rcx, [r12 + 0xb4]
call fcn.140107ff4
movsxd r8, dword [0x1401d0c40]
lea rdx, [0x140000000]
lea r10, [rdx + 0x1d0da0]
movabs rcx, 0x2b6109100
add rax, rcx
lea r10, [r10 + r8*8]
imul rcx, rax, 0x989680
lea eax, [r8 + 1]
mov qword [0x1401d0d88], r10
mov dword [r10], ecx
mov r9, r10
sar rcx, 0x20
mov r8, r10
mov dword [r10 + 4], ecx
movsxd rcx, eax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
lea rax, [rdx + rdx*2]
mov rdx, r10
sub rcx, rax
mov dword [0x1401d0c40], ecx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x14001af3a
call fcn.140050120
mov rdx, rax
lea rcx, str.__Could_not_set_timestamp:__s
call fcn.14004f910
test r14d, r14d
je 0x14001af5f
mov rcx, qword [r12 + 0x1d]
test rcx, rcx
je 0x14001af57
call fcn.1400e9080
mov qword [r12 + 0x1d], 0
mov rcx, r12
call fcn.1400e9080
mov r14, qword [rbp + 8]
lea rax, [r14 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001af7e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 8], 0xffffffffffffffff
inc qword [0x1401954e0]
cmp byte [rbp + 0x68], 0
jne 0x14001af91
cmp byte [rbp + 0x69], 0
je 0x14001afa5
mov r8, qword [rbp + 0x48]
lea r9, [rbp + 0x68]
mov rdx, qword [rbp + 0x28]
mov rcx, r15
call fcn.1400186b0
mov rcx, r15
call fcn.1400e9080
xor r15d, r15d
mov rdi, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x50]
test rsi, rsi
je 0x14001a447
mov rsi, qword [rsi + 8]
mov qword [rbp + 0x50], rsi
test rsi, rsi
je 0x14001a447
mov r14, qword [rbp + 0x38]
mov r13, qword [rbp + 0x48]
jmp 0x14001a210
cmp byte [0x1401e8fdb], 0
jne 0x14001aff4
lea rcx, str.__Note:_The_selected_ISO_uses_Rock_Ridge_deep_directories._r_n__Because_of_this__it_may_take_a_very_long_time_to_scan_or_extract...
call fcn.14004f910
inc qword [0x1401d0dc0]
mov ebx, 0xffffffff
xor r15d, r15d
mov byte [0x1401e8fdb], 1
jmp 0x14001a449
mov ebx, eax
jmp 0x14001a449
lea rcx, str.Could_not_resolve_Rock_Ridge_Symlink___ABORTING_
call fcn.14004f910
mov ebx, dword [rbp]
jmp 0x14001a449
lea rax, str.Short_write_detected
jmp 0x14001b038
call fcn.140050120
mov rdx, rax
lea rcx, str.__Error_writing_file:__s
call fcn.14004f910
mov rsi, qword [rbp + 8]
mov ebx, dword [rbp]
test rsi, rsi
je 0x14001b08c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc qword [0x1401954e0]
mov rsi, qword [rbp + 0x30]
jmp 0x14001b09c
mov rdx, qword [rbp + 0x58]
lea rcx, str.__Error_reading_ISO9660_file__s_at_LSN__lu
mov r8d, ebx
call fcn.14004f910
jmp 0x14001b047
mov ebx, dword [rbp]
xor r15d, r15d
jmp 0x14001a449
mov ebx, dword [rbp]
mov rsi, qword [rbp + 0x30]
inc qword [0x1401954e0]
test rsi, rsi
je 0x14001b0ab
lea r8, [0x140074550]
mov rcx, rsi
call fcn.140070aa0
mov rcx, r15
call fcn.1400e9080
mov rcx, qword [rbp + 0x40]
jmp 0x14001b0bc
mov rcx, rax
call fcn.1400e9080
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400b1f80
mov rbx, qword [rsp + 0x510]
add rsp, 0x4c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret