Function at 0x14001a9d0
Capabilities:
Copy file
Create directory

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4c0
lea rbp, [rsp + 0x80]
and rbp, 0xffffffffffffffc0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov ebx, 1
mov qword [rbp + 0x40], rdx
mov r14, rdx
mov dword [rbp], ebx
mov rdx, qword [0x1401d0e00]
mov rdi, rcx
mov qword [rbp + 0x30], rcx
xor r15d, r15d
mov qword [rbp + 0x10], 0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], r15b
jne 0x14001aa33
lea rcx, [rbp + 0x180]
add rax, rcx
mov ecx, 0x10000
mov qword [rbp + 0x60], rax
call fcn.1400e8c84
xor esi, esi
mov qword [rbp + 0x18], rax
mov r12, rax
test rdi, rdi
je 0x14001ba1d
test r14, r14
je 0x14001ba1d
test rax, rax
je 0x14001ba1d
mov rax, qword [0x1401d0e00]
lea r9, str._s_s_
mov qword [rsp + 0x28], r14
lea rcx, [rbp + 0x180]
mov edx, 0x104
mov qword [rsp + 0x20], rax
mov r8, 0xffffffffffffffff
call fcn.140004fd0
test eax, eax
js 0x14001b9f5
cdqe
mov rdx, r14
mov rcx, rdi
mov qword [rbp + 0x50], rax
call fcn.140074050
mov qword [rbp + 0x38], rax
mov rdi, rax
test rax, rax
jne 0x14001aaf3
mov rdx, r14
lea rcx, str.Could_not_access_directory__s
call fcn.14004f2f0
inc qword [0x1401954e0]
mov rcx, r15
call fcn.1400e8c70
mov rcx, r12
jmp 0x14001ba20
xor r12d, r12d
cmp byte [r14], sil
jne 0x14001ab12
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
mov edx, ebx
mov ecx, 0xffffffff
call fcn.140066570
mov rsi, qword [rdi + 8]
mov qword [rbp + 0x58], rsi
test rsi, rsi
je 0x14001ad79
cmp dword [0x14019f120], 0
jne 0x14001b9df
cmp dword [0x1401d0cc4], 0
mov rsi, qword [rsi + 0x10]
mov qword [rbp + 8], rsi
mov dword [rbp + 0x20], r12d
je 0x14001ab63
cmp dword [rsi], 1
jne 0x14001ab63
cmp dword [0x1401944a8], 0
je 0x14001ab63
test dword [rsi + 0xae], 0x200
jne 0x14001b94c
lea r13, [rsi + 0xfd]
mov r15, r12
cmp byte [r13], 0x2e
jne 0x14001ab98
cmp byte [r13 + 1], 0
je 0x14001b928
cmp byte [r13], 0x2e
jne 0x14001ab98
cmp byte [r13 + 1], 0x2e
jne 0x14001ab98
cmp byte [r13 + 2], 0
je 0x14001b928
cmp dword [rsi], 1
mov edi, r12d
mov dword [rbp + 0x24], r12d
jne 0x14001ac43
cmp dword [0x1401944a8], 0
je 0x14001ac43
test r13, r13
jne 0x14001abbf
mov rax, r12
jmp 0x14001abd0
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], 0
jne 0x14001abc6
inc rax
lea r15, [rbp + 0x180]
mov ebx, 0x103
mov rdx, r13
sub rbx, qword [rbp + 0x50]
cmp rax, rbx
cmovb rbx, rax
add r15, qword [rbp + 0x50]
mov rcx, r15
mov r8, rbx
call fcn.140135ea0
mov byte [rbx + r15 - 1], 0
test r13, r13
je 0x14001ac27
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rax + r13], 0
jne 0x14001ac10
cmp rax, 0x40
jbe 0x14001ac27
mov byte [0x1401e8f5a], 1
mov rax, qword [rsi + 0x1d]
test rax, rax
setne dil
mov dword [rbp + 0x24], edi
test rax, rax
je 0x14001ac61
mov byte [0x1401e8f58], 1
jmp 0x14001ac61
movzx r8d, byte [0x1401d05dc]
lea r15, [rbp + 0x180]
add r15, qword [rbp + 0x50]
mov rcx, r13
mov rdx, r15
call fcn.140074ec0
cmp dword [rsi + 0xf8], 2
jne 0x14001ae02
cmp dword [0x1401d0cc4], 0
jne 0x14001ad58
lea rcx, [rbp + 0x180]
call fcn.1400fc834
mov rbx, rax
test rax, rax
jne 0x14001adaf
lea rcx, str.Could_not_allocate_string_for_sanitized_path
call fcn.14004f2f0
mov rbx, r12
mov rcx, rbx
call fcn.140017cf0
mov rcx, rax
mov rdi, rax
call fcn.140104594
test rdi, rdi
je 0x14001acc2
mov rcx, rdi
call fcn.1400e8c70
cmp dword [0x14019f5b8], 0
je 0x14001ad50
lea rcx, [rsi + 0xb4]
call fcn.140107be4
movsxd r8, dword [0x1401d0cc0]
lea rdx, [0x140000000]
lea r10, [rdx + 0x1d0e20]
movabs rcx, 0x2b6109100
lea r10, [r10 + r8*8]
add rax, rcx
imul rcx, rax, 0x989680
lea eax, [r8 + 1]
mov qword [0x1401d0e08], r10
movsxd r8, eax
mov r9, r10
mov dword [r10], ecx
movabs rax, 0xaaaaaaaaaaaaaaab
mul r8
sar rcx, 0x20
shr rdx, 1
mov dword [r10 + 4], ecx
mov rcx, rbx
lea rax, [rdx + rdx*2]
mov rdx, r10
sub r8, rax
mov dword [0x1401d0cc0], r8d
mov r8, r10
call fcn.140019da0
mov rcx, rbx
call fcn.1400e8c70
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x30]
call fcn.14001a9d0
mov dword [rbp], eax
mov r15, r12
test eax, eax
jg 0x14001b97c
jns 0x14001b928
xor ebx, ebx
mov rsi, qword [rbp + 0x10]
cmp rsi, 0xffffffffffffffff
je 0x14001b9ed
mov r12, qword [rbp + 0x18]
test rsi, rsi
je 0x14001b9f1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc qword [0x1401954e0]
mov rsi, qword [rbp + 0x38]
jmp 0x14001ba01
lea rdx, [rax + 2]
nop dword [rax]
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x14001adc7
mov rcx, rdx
sub rcx, rbx
cmp rcx, rax
jae 0x14001aca2
movzx eax, byte [rdx]
cmp al, 0x2a
je 0x14001adfa
cmp al, 0x3f
je 0x14001adfa
cmp al, 0x3c
je 0x14001adfa
cmp al, 0x3e
je 0x14001adfa
cmp al, 0x3a
je 0x14001adfa
cmp al, 0x7c
jne 0x14001adfd
mov byte [rdx], 0x5f
inc rdx
jmp 0x14001adc0
mov rbx, qword [rsi + 0xe0]
lea rax, [rbp + 0x68]
mov rdx, rbx
mov qword [rbp + 0x48], rbx
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rax
mov r8, r15
mov rcx, r14
call fcn.140018330
test eax, eax
je 0x14001af93
test edi, edi
je 0x14001af8b
test rbx, rbx
jne 0x14001af8b
lea rdx, str._firmware
mov rcx, r14
call fcn.140113550
test eax, eax
jne 0x14001aee4
mov rax, qword [rsi + 0x1d]
lea r9, [0x14015bc0c]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x2b0]
mov edx, 0x100
mov qword [rsp + 0x20], r14
mov r8, 0xffffffffffffffff
call fcn.140004fd0
mov rcx, qword [rbp + 0x30]
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], bl
call fcn.140073a40
mov rbx, rax
test rax, rax
je 0x14001af8b
mov rax, qword [rax + 0xe0]
mov rcx, qword [rbx + 0x1d]
add rax, 0x7ff
shr rax, 0xb
add qword [0x1401d0e18], rax
test rcx, rcx
je 0x14001aed4
call fcn.1400e8c70
mov qword [rbx + 0x1d], r12
mov rcx, rbx
call fcn.1400e8c70
mov r15, r12
jmp 0x14001b928
mov rcx, r12
lea rdx, str.live
nop
movzx eax, byte [rcx + r13]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x14001af8b
cmp rcx, 5
jne 0x14001aef0
movzx eax, byte [rsi + 0x1d]
lea r8, str.casper
xor edx, edx
mov rcx, r12
or rdx, rax
movzx eax, byte [rsi + 0x1e]
shl rax, 8
or rdx, rax
movzx eax, byte [rsi + 0x1f]
shl rax, 0x10
or rdx, rax
movzx eax, byte [rsi + 0x20]
shl rax, 0x18
or rdx, rax
movzx eax, byte [rsi + 0x21]
shl rax, 0x20
or rdx, rax
movzx eax, byte [rsi + 0x22]
shl rax, 0x28
or rdx, rax
movzx eax, byte [rsi + 0x23]
shl rax, 0x30
or rdx, rax
movzx eax, byte [rsi + 0x24]
shl rax, 0x38
or rdx, rax
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x14001af8b
cmp rcx, 7
jne 0x14001af70
mov byte [0x1401e8f69], 1
mov r15, r12
jmp 0x14001b928
test edi, edi
jne 0x14001afa6
mov rdx, rbx
lea rcx, [rbp + 0x180]
call fcn.1400199b0
xor esi, esi
nop dword [rax + rax]
cmp byte [rbp + r12 + 0x6d], 0
je 0x14001b091
lea rax, [0x140000000]
cmp dword [rsi + rax + 0x19f5c0], 0
je 0x14001b091
mov rax, qword [rax + r12*8 + 0x1500f8]
lea r9, str._s_syslinux__s__s
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x3b0]
lea rax, [0x140196f48]
mov edx, 0x80
mov qword [rsp + 0x28], rax
mov r8, 0xffffffffffffffff
lea rax, [0x140156a6c]
mov qword [rsp + 0x20], rax
call fcn.140004fd0
lea rcx, [rbp + 0x3b0]
mov byte [rbp + 0x42f], 0
call fcn.140017cf0
lea rcx, [rbp + 0x180]
mov rdi, rax
call fcn.140017cf0
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, eax
test rdi, rdi
je 0x14001b062
mov rcx, rdi
call fcn.1400e8c70
test rbx, rbx
je 0x14001b06f
mov rcx, rbx
call fcn.1400e8c70
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetLastError]
test r14d, r14d
jne 0x14001b0a4
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Could_not_replace_file:__s
call fcn.14004f2f0
inc r12
add rsi, 4
cmp rsi, 8
jb 0x14001afb0
jmp 0x14001b119
lea r8, [rbp + 0x290]
mov ecx, 2
lea rdx, [rbp + 0x3b0]
call fcn.140047330
test eax, eax
je 0x14001b0f9
xor ebx, ebx
lea rax, [0x140197810]
movsxd rdx, ebx
add rdx, rax
lea rcx, [rbp + 0x290]
mov r8d, 0x20
call fcn.1401368e0
test eax, eax
je 0x14001b0f4
add ebx, 0x20
cmp ebx, 0xbe0
jb 0x14001b0c2
xor eax, eax
jmp 0x14001b0f9
mov eax, 1
test eax, eax
lea rdx, [0x140158ab4]
lea rax, [0x140158ab0]
cmovne rdx, rax
lea rcx, str.__Replaced_with_local_version__s
call fcn.14004f2f0
xor r15d, r15d
cmp r12, 2
jb 0x14001b928
lea rcx, [rbp + 0x180]
mov ebx, 1
call fcn.1400fc834
mov r15, rax
test rax, rax
jne 0x14001b14d
lea rcx, str.Could_not_allocate_string_for_sanitized_path
call fcn.14004f2f0
jmp 0x14001b1ad
lea rdx, [rax + 2]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x14001b160
mov rax, rdx
sub rax, r15
cmp rax, rcx
jae 0x14001b19a
movzx eax, byte [rdx]
cmp al, 0x2a
je 0x14001b190
cmp al, 0x3f
je 0x14001b190
cmp al, 0x3c
je 0x14001b190
cmp al, 0x3e
je 0x14001b190
cmp al, 0x3a
je 0x14001b190
cmp al, 0x7c
jne 0x14001b195
xor ebx, ebx
mov byte [rdx], 0x5f
inc rdx
jmp 0x14001b151
test ebx, ebx
jne 0x14001b1ad
mov rdx, r15
lea rcx, str.__File_name_sanitized_to__s
call fcn.14004f2f0
mov r12d, dword [rbp + 0x24]
mov ebx, 1
test r12d, r12d
je 0x14001b55d
cmp dword [0x1401e867c], 2
jne 0x14001b3a0
mov rdi, qword [rbp + 8]
lea r9, [0x14015bc0c]
mov edx, 0x100
lea rcx, [rbp + 0x2b0]
mov r8, 0xffffffffffffffff
mov rax, qword [rdi + 0x1d]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140004fd0
mov rcx, qword [rbp + 0x30]
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], 0
call fcn.140073a40
mov r14, rax
test rax, rax
je 0x14001b388
movzx ecx, byte [rbp + 0x180]
lea rax, [rbp + 0x180]
test cl, cl
je 0x14001b249
cmp cl, 0x2f
jne 0x14001b23e
mov byte [rax], 0x5c
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001b236
mov rax, qword [rdi + 0x1d]
test rax, rax
je 0x14001b273
movzx ecx, byte [rax]
test cl, cl
je 0x14001b273
nop dword [rax]
cmp cl, 0x2f
jne 0x14001b268
mov byte [rax], 0x5c
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001b260
cmp dword [r14 + 0xf8], 2
lea rax, [0x1401560f8]
mov r9, qword [rdi + 0x1d]
lea r8, [0x1401564ce]
cmove r8, rax
lea rdx, [rbp + 0x180]
lea rcx, str.Symlinking:__s_s___s
call fcn.14004f2f0
mov rbx, qword [rbp + 8]
lea rcx, [rbp + 0x180]
xor edi, edi
cmp dword [r14 + 0xf8], 2
mov rbx, qword [rbx + 0x1d]
sete dil
call fcn.140017cf0
mov rcx, rbx
mov rsi, rax
call fcn.140017cf0
mov r8d, edi
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateSymbolicLinkW]
movzx edi, al
test rbx, rbx
je 0x14001b2f3
mov rcx, rbx
call fcn.1400e8c70
test rsi, rsi
je 0x14001b300
mov rcx, rsi
call fcn.1400e8c70
test dil, dil
jne 0x14001b319
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Could_not_create_symlink:__s
call fcn.14004f2f0
mov rdi, qword [rbp + 8]
mov rax, qword [rdi + 0x1d]
test rax, rax
je 0x14001b343
movzx ecx, byte [rax]
test cl, cl
je 0x14001b343
nop dword [rax]
cmp cl, 0x5c
jne 0x14001b338
mov byte [rax], 0x2f
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001b330
movzx ecx, byte [rbp + 0x180]
lea rax, [rbp + 0x180]
test cl, cl
je 0x14001b368
cmp cl, 0x5c
jne 0x14001b35d
mov byte [rax], 0x2f
movzx ecx, byte [rax + 1]
inc rax
test cl, cl
jne 0x14001b355
mov rcx, qword [r14 + 0x1d]
test rcx, rcx
je 0x14001b37e
call fcn.1400e8c70
mov qword [r14 + 0x1d], 0
mov rcx, r14
call fcn.1400e8c70
xor ebx, ebx
mov r14, qword [rbp + 0x48]
xor r13d, r13d
mov qword [rbp + 8], rdi
test ebx, ebx
je 0x14001b8d0
jmp 0x14001b569
mov r14, qword [rbp + 0x48]
test r14, r14
jne 0x14001b53c
test r13, r13
lea rcx, str._NULL_
lea rdx, str.syslinux
cmovne rcx, r13
call fcn.140107d64
mov rdi, qword [rbp + 8]
test eax, eax
jne 0x14001b461
mov rax, qword [rdi + 0x1d]
lea rcx, str._NULL_
test rax, rax
lea rdx, str.isolinux
cmovne rcx, rax
call fcn.140107d64
test eax, eax
jne 0x14001b461
lea rcx, [rbp + 0x180]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14001b403
inc rax
lea rsi, [0x1401d0cd0]
mov ebx, 0x104
lea rdx, [rbp + 0x180]
cmp rax, rbx
mov rcx, rsi
cmovb rbx, rax
mov r8, rbx
call fcn.140135ea0
mov rdx, r14
mov byte [rbx + rsi - 1], 0
lea rcx, [rbp + 0x180]
call fcn.1400199b0
mov rdx, qword [rdi + 0x1d]
lea rcx, str.__Found_Rock_Ridge_symbolic_link_to__s
mov r13d, dword [rbp + 0x20]
call fcn.14004f2f0
jmp 0x14001b569
mov rbx, qword [rbp + 0x40]
lea rdx, str._firmware
mov rcx, rbx
call fcn.140113550
test eax, eax
mov rax, qword [rdi + 0x1d]
jne 0x14001b501
mov qword [rsp + 0x28], rax
lea r9, [0x14015bc0c]
mov edx, 0x100
mov qword [rsp + 0x20], rbx
mov r8, 0xffffffffffffffff
lea rcx, [rbp + 0x2b0]
call fcn.140004fd0
mov rcx, qword [rbp + 0x30]
lea rdx, [rbp + 0x2b0]
mov byte [rbp + 0x3af], 0
call fcn.140073a40
mov qword [rbp + 8], rax
mov rdi, rax
test rax, rax
je 0x14001b983
mov r14, qword [rax + 0xe0]
lea rcx, [rbp + 0x180]
mov rdx, r14
mov r13d, 1
call fcn.1400199b0
lea rcx, str.__Duplicated_from__s
lea rdx, [rbp + 0x2b0]
call fcn.14004f2f0
jmp 0x14001b569
test rax, rax
jne 0x14001b50a
xor edx, edx
jmp 0x14001b51a
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rax + rdx], 0
jne 0x14001b511
lea rcx, [rbp + 0x180]
call fcn.1400199b0
mov rdx, qword [rdi + 0x1d]
lea rcx, str.__Ignoring_Rock_Ridge_symbolic_link_to__s
mov r13d, dword [rbp + 0x20]
call fcn.14004f2f0
jmp 0x14001b569
cmp dword [0x1401e87c0], 0
je 0x14001b8d0
mov rdx, r14
lea rcx, str.Unexpected_symlink_length:__d
call fcn.14004f2f0
jmp 0x14001b8d0
mov r14, qword [rbp + 0x48]
mov r13d, dword [rbp + 0x20]
mov rdi, qword [rbp + 8]
mov rcx, r15
mov qword [rsp + 0x30], r14
call fcn.140050b10
mov qword [rbp + 0x10], rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14001b5e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Unable_to_create_file:__s
call fcn.14004f2f0
lea ecx, [rbx - 5]
cmp ecx, 1
ja 0x14001b9ea
lea rdx, [r15 + 3]
test rdx, rdx
lea rcx, str._NULL_
cmovne rcx, rdx
lea rdx, str.autorun.inf
call fcn.140113550
test eax, eax
jne 0x14001b9ea
lea rcx, str.__NOTE:_This_is_usually_caused_by_a_poorly_designed_security_solution._See_https:__bit.ly_40qDtyF._r_n__This_file_will_be_skipped_for_now__but_you_should_really_look_into_using_a_SMARTER_antivirus_solution.
call fcn.14004f2f0
jmp 0x14001b803
test r12d, r12d
je 0x14001b644
mov rdx, qword [rdi + 0x1d]
test rdx, rdx
jne 0x14001b5f5
xor r8d, r8d
jmp 0x14001b60a
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14001b600
lea r9, [rbp + 0x28]
mov rcx, rax
call fcn.140050980
inc qword [0x1401954e0]
mov dword [rbp], eax
test eax, eax
jne 0x14001b803
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Error_writing_file:__s
call fcn.14004f2f0
mov ebx, dword [rbp]
jmp 0x14001ad89
cmp qword [0x1401d0e60], 0
je 0x14001b65a
lea rcx, [rbp + 0x80]
call fcn.140041a50
xor esi, esi
test r14, r14
jle 0x14001b79c
cmp dword [0x14019f120], 0
mov r12, qword [rbp + 0x18]
jne 0x14001b9d3
mov ebx, dword [rdi + 0xd8]
lea rax, [r14 + 0x7ff]
mov rcx, qword [rbp + 0x30]
cqo
and edx, 0x7ff
mov word [rsp + 0x20], 0x800
add rax, rdx
add ebx, esi
sar rax, 0xb
mov r8d, ebx
mov rdi, rax
cmp rax, 0x20
mov eax, 0x20
mov rdx, r12
cmovg rdi, rax
mov r9d, edi
call fcn.140072620
movsxd rcx, eax
mov rax, rdi
shl rax, 0xb
cmp rcx, rax
jne 0x14001b9c0
mov ebx, 0x10000
cmp r14, rbx
cmovb ebx, r14d
cmp qword [0x1401d0e60], 0
je 0x14001b6f8
mov r8d, ebx
lea rcx, [rbp + 0x80]
mov rdx, r12
call fcn.140046cf0
mov rcx, qword [rbp + 0x10]
lea r9, [rbp + 0x28]
mov r8d, ebx
mov rdx, r12
call fcn.140050980
inc qword [0x1401954e0]
mov dword [rbp], eax
test eax, eax
je 0x14001b9a0
mov eax, dword [rbp + 0x28]
cmp eax, ebx
jne 0x14001b997
mov r8, qword [0x1401d0e48]
sub r14, rax
add r8, rdi
mov rax, r8
mov qword [0x1401d0e48], r8
sub rax, qword [0x1401d0dd8]
cmp rax, 0x80
jb 0x14001b78c
xor r9d, r9d
mov dword [rsp + 0x20], 0
cmp dword [0x1401e867c], 2
mov edx, 0xc9f
mov ecx, 7
cmovne r9, qword [0x1401d0e18]
add r9, qword [0x1401d0e40]
call fcn.140066570
mov rax, qword [0x1401d0e48]
mov qword [0x1401d0dd8], rax
add rsi, rdi
mov rdi, qword [rbp + 8]
test r14, r14
jg 0x14001b665
cmp qword [0x1401d0e60], 0
je 0x14001b7ff
lea rcx, [rbp + 0x80]
call fcn.140047240
xor ebx, ebx
nop dword [rax]
nop dword [rax + rax]
movzx r8d, byte [rbp + rbx + 0x80]
lea rdx, str._02x
mov rcx, qword [0x1401d0e60]
call fcn.140001060
inc rbx
cmp rbx, 0x10
jb 0x14001b7c0
mov rcx, qword [0x1401d0e60]
lea r8, [rbp + 0x183]
lea rdx, str.__.__s_n
call fcn.140001060
mov rsi, qword [rbp + 0x10]
cmp dword [0x14019f5b8], 0
mov rbx, qword [rbp + 8]
je 0x14001b8ad
lea rcx, [rbx + 0xb4]
call fcn.140107be4
movsxd r8, dword [0x1401d0cc0]
lea rdx, [0x140000000]
lea r10, [rdx + 0x1d0e20]
movabs rcx, 0x2b6109100
add rax, rcx
lea r10, [r10 + r8*8]
imul rcx, rax, 0x989680
lea eax, [r8 + 1]
mov qword [0x1401d0e08], r10
mov dword [r10], ecx
mov r9, r10
sar rcx, 0x20
mov r8, r10
mov dword [r10 + 4], ecx
movsxd rcx, eax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 1
lea rax, [rdx + rdx*2]
mov rdx, r10
sub rcx, rax
mov dword [0x1401d0cc0], ecx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x14001b8ad
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Could_not_set_timestamp:__s
call fcn.14004f2f0
test r13d, r13d
je 0x14001b8d0
mov rcx, qword [rbx + 0x1d]
test rcx, rcx
je 0x14001b8c8
call fcn.1400e8c70
mov qword [rbx + 0x1d], 0
mov rcx, rbx
call fcn.1400e8c70
mov r14, qword [rbp + 0x10]
lea rax, [r14 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001b8ef
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x10], 0xffffffffffffffff
inc qword [0x1401954e0]
cmp byte [rbp + 0x68], 0
jne 0x14001b902
cmp byte [rbp + 0x69], 0
je 0x14001b91d
mov rdx, qword [rbp + 0x40]
lea r8, [rbp + 0x180]
add r8, qword [rbp + 0x50]
lea r9, [rbp + 0x68]
mov rcx, r15
call fcn.140018fe0
mov rcx, r15
call fcn.1400e8c70
xor r15d, r15d
mov rax, qword [rbp + 0x58]
mov rax, qword [rax + 8]
mov qword [rbp + 0x58], rax
mov rsi, rax
test rax, rax
je 0x14001ad79
mov r14, qword [rbp + 0x40]
xor r12d, r12d
jmp 0x14001ab23
cmp byte [0x1401e8f5b], 0
jne 0x14001b961
lea rcx, str.__Note:_The_selected_ISO_uses_Rock_Ridge_deep_directories._r_n__Because_of_this__it_may_take_a_very_long_time_to_scan_or_extract...
call fcn.14004f2f0
inc qword [0x1401d0e40]
mov ebx, 0xffffffff
mov byte [0x1401e8f5b], 1
mov r15, r12
jmp 0x14001ad7b
mov ebx, eax
jmp 0x14001ad7b
lea rcx, str.Could_not_resolve_Rock_Ridge_Symlink___ABORTING_
call fcn.14004f2f0
mov ebx, dword [rbp]
jmp 0x14001ad7b
lea rax, str.Short_write_detected
jmp 0x14001b9a5
call fcn.14004fba0
mov rdx, rax
lea rcx, str.__Error_writing_file:__s
call fcn.14004f2f0
mov ebx, dword [rbp]
mov rsi, qword [rbp + 0x10]
jmp 0x14001ad8d
mov rdx, qword [rbp + 0x60]
lea rcx, str.__Error_reading_ISO9660_file__s_at_LSN__lu
mov r8d, ebx
call fcn.14004f2f0
mov ebx, dword [rbp]
mov rsi, qword [rbp + 0x10]
jmp 0x14001ad8d
mov ebx, dword [rbp]
mov r15, r12
jmp 0x14001ad7b
mov ebx, dword [rbp]
mov r12, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x38]
inc qword [0x1401954e0]
test rsi, rsi
je 0x14001ba10
lea r8, [0x140074a20]
mov rcx, rsi
call fcn.140070060
mov rcx, r15
call fcn.1400e8c70
mov rcx, r12
jmp 0x14001ba20
mov rcx, rax
call fcn.1400e8c70
mov eax, ebx
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1400b2a30
mov rbx, qword [rsp + 0x510]
add rsp, 0x4c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret