Function at 0x1800cbf50
Capabilities:
Copy file
Create directory

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x978
mov qword [rsp + 0x928], 0xfffffffffffffffe
mov rax, qword [0x180284030]
xor rax, rsp
mov qword [rsp + 0x968], rax
mov dword [rsp + 0x870], 0
xor eax, eax
mov word [rsp + 0x660], ax
lea rax, [rsp + 0x662]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x450], ax
lea rax, [rsp + 0x452]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov rax, qword [0x180229458]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x48]
mov rdi, rax
xor eax, eax
mov ecx, 0x200
rep stosb byte [rdi], al
lea rax, [rsp + 0x248]
lea rcx, str.EFIBoot
mov rdi, rax
mov rsi, rcx
mov ecx, 0x12
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x25a]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f6
rep stosb byte [rdi], al
mov qword [rsp + 0x8b8], 0
jmp 0x1800cc031
mov rax, qword [rsp + 0x8b8]
inc rax
mov qword [rsp + 0x8b8], rax
cmp qword [rsp + 0x8b8], 2
jae 0x1800cc100
mov rax, qword [rsp + 0x8b8]
imul rax, rax, 0x208
lea rax, [rsp + rax + 0x40]
mov qword [rsp + 0x930], rax
lea rdx, [rsp + 0x8c0]
mov rcx, qword [rsp + 0x990]
call fcn.1800cb8a0
mov qword [rsp + 0x938], rax
mov rax, qword [rsp + 0x938]
mov qword [rsp + 0x940], rax
mov rcx, qword [rsp + 0x940]
call fcn.18000122b
mov rcx, qword [rsp + 0x930]
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [0x180229478]
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x8c0]
call fcn.18000165e
xor edx, edx
lea rcx, [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800cc0fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800cc0fb
mov dword [rsp + 0x870], 0xffffefdd
jmp 0x1800cc100
jmp 0x1800cc01e
cmp dword [rsp + 0x870], 0
je 0x1800cc10f
jmp 0x1800cc397
lea rcx, [rsp + 0x898]
call fcn.180045670
nop
lea rcx, [rsp + 0x898]
call fcn.180001357
movzx eax, al
test eax, eax
je 0x1800cc186
xor eax, eax
test eax, eax
jne 0x1800cc162
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x482
lea rdx, [0x180229488]
mov ecx, 2
call fcn.1800d5be0
cmp eax, 1
jne 0x1800cc162
int3
mov dword [rsp + 0x8e0], 0xffffbff0
lea rcx, [rsp + 0x898]
call fcn.18000165e
mov eax, dword [rsp + 0x8e0]
jmp 0x1800cc39e
lea rcx, [rsp + 0x878]
call fcn.180045750
nop
lea rcx, [rsp + 0x878]
call fcn.180001a19
test rax, rax
jne 0x1800cc1f3
lea rdx, [rsp + 0x878]
lea rcx, [rsp + 0x898]
call fcn.18007b8d0
movzx eax, al
test eax, eax
jne 0x1800cc1f3
xor eax, eax
test eax, eax
jne 0x1800cc1f3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 0x48b
lea rdx, [0x1802294a0]
mov ecx, 2
call fcn.1800d5be0
cmp eax, 1
jne 0x1800cc1f3
int3
mov rax, qword [rsp + 0x990]
mov rcx, qword [rax]
call fcn.1800d0f90
movzx eax, al
test eax, eax
je 0x1800cc2a0
lea rcx, [rsp + 0x878]
call fcn.18000122b
mov r9, rax
lea r8, [0x1802294b8]
mov edx, 0x104
lea rcx, [rsp + 0x660]
call fcn.1800d6e60
lea rdx, [rsp + 0x8e8]
mov rcx, qword [rsp + 0x990]
call fcn.1800cb8a0
mov qword [rsp + 0x948], rax
mov rax, qword [rsp + 0x948]
mov qword [rsp + 0x950], rax
mov rcx, qword [rsp + 0x950]
call fcn.18000122b
mov r9, rax
lea r8, str._sEFIBoot_bootx64.efi
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x8e8]
call fcn.18000165e
jmp 0x1800cc32d
lea rcx, [rsp + 0x878]
call fcn.18000122b
mov r9, rax
lea r8, [0x180229518]
mov edx, 0x104
lea rcx, [rsp + 0x660]
call fcn.1800d6e60
lea rdx, [rsp + 0x908]
mov rcx, qword [rsp + 0x990]
call fcn.1800cb8a0
mov qword [rsp + 0x958], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0x960], rax
mov rcx, qword [rsp + 0x960]
call fcn.18000122b
mov r9, rax
lea r8, str._sEFIBoot_bootia32.efi
mov edx, 0x104
lea rcx, [rsp + 0x450]
call fcn.1800d6e60
nop
lea rcx, [rsp + 0x908]
call fcn.18000165e
xor r8d, r8d
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x660]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x1800cc372
mov dword [rsp + 0x870], 0xffff9df5
lea rcx, [rsp + 0x878]
call fcn.18000165e
nop
lea rcx, [rsp + 0x898]
call fcn.18000165e
jmp 0x1800cc397
lea rcx, [rsp + 0x878]
call fcn.18000165e
nop
lea rcx, [rsp + 0x898]
call fcn.18000165e
xor eax, eax
test eax, eax
jne 0x1800cc010
mov eax, dword [rsp + 0x870]
mov rcx, qword [rsp + 0x968]
xor rcx, rsp
call fcn.1800d65d0
add rsp, 0x978
pop rdi
pop rsi
ret