Function at 0x6a94449f
Capabilities:
Get file attributes
Query environment variable
Set file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x578
lea rdx, str._access
lea r12, [rsp + 0x390]
mov r13, rcx
lea rdi, [rsp + 0x50]
mov rcx, r12
call fcn.6a942f04
lea rcx, str.TEMP
call sub.msvcrt.dll_getenv
mov r8, r12
mov rcx, rdi
mov rdx, rax
call fcn.6a947260
mov rcx, r12
lea rsi, [rsp + 0x1b0]
call fcn.6a945188
mov r8d, 0x18
mov rdx, rdi
mov rcx, rsi
call fcn.6a9451f0
lea rax, [rsp + 0x80]
cmp dword [rsp + 0x2a8], 0
mov qword [rsp + 0x78], 0
lea r14, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rax, [r13 + 0x10]
lea rbp, [rsp + 0x48]
mov qword [r13], rax
lea rax, [rsp + 0xb0]
lea r15, [rsp + 0xf0]
mov byte [rsp + 0x80], 0
mov qword [r13 + 8], 0
mov byte [r13 + 0x10], 0
mov qword [rsp + 0x28], rax
je 0x6a944665
mov rcx, r14
call fcn.6a943c6f
lea rdx, str.name
mov rcx, r15
call fcn.6a942f04
lea rcx, [rsp + 0x110]
mov rdx, r14
call fcn.6a945128
xor edx, edx
xor ecx, ecx
call sub.msvcrt.dll__getcwd
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x130]
mov rdx, rbp
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.6a943f90
lea rbp, [rsp + 0xd0]
mov rcx, rbp
call sym.main.dll_get_exe_name_abi:cxx11___
lea rax, [rsp + 0x170]
lea rdx, str.prog
mov rcx, rax
mov qword [rsp + 0x38], rax
call fcn.6a942f04
lea rcx, [rsp + 0x190]
mov rdx, rbp
call fcn.6a945128
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.6a9441ba
mov rcx, qword [rsp + 0x28]
mov rdx, r12
call fcn.6a941c80
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x70]
call fcn.6a945118
mov rcx, qword [rsp + 0x28]
call fcn.6a945188
mov rcx, r12
call fcn.6a941570
mov rcx, qword [rsp + 0x38]
call fcn.6a94147e
mov rcx, qword [rsp + 0x30]
call fcn.6a94147e
mov rcx, r15
call fcn.6a94147e
mov rcx, rbp
call fcn.6a945188
mov rcx, r14
call fcn.6a945188
jmp 0x6a944784
mov rdx, r13
mov rcx, rsi
call fcn.6a9450a8
mov rcx, r14
call fcn.6a943c6f
lea rdx, str.name
mov rcx, r12
call fcn.6a942f04
lea rcx, [rsp + 0x3b0]
mov rdx, r14
call fcn.6a945128
xor edx, edx
xor ecx, ecx
call sub.msvcrt.dll__getcwd
lea rcx, [rsp + 0x3d0]
mov rdx, rbp
mov qword [rsp + 0x48], rax
call fcn.6a943f90
lea rbp, [rsp + 0x410]
lea rdx, str.uuid
mov rcx, rbp
call fcn.6a942f04
lea rcx, [rsp + 0x430]
mov rdx, r13
call fcn.6a945120
jmp 0x6a9446e3
mov rcx, qword [rsp + 0x28]
call sym.main.dll_get_exe_name_abi:cxx11___
lea rcx, [rsp + 0x450]
lea rdx, str.prog
call fcn.6a942f04
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x470]
lea rbx, [rsp + 0x490]
call fcn.6a945128
mov r8, rbx
mov rdx, r12
mov rcx, r15
call fcn.6a9441ba
lea rbp, [rsp + 0xd0]
mov rdx, r15
mov rcx, rbp
call fcn.6a941c80
lea rcx, [rsp + 0x70]
mov rdx, rbp
call fcn.6a945118
mov rcx, rbp
call fcn.6a945188
mov rcx, r15
call fcn.6a941570
sub rbx, 0x40
mov rcx, rbx
call fcn.6a94147e
cmp rbx, r12
jne 0x6a944759
mov rcx, qword [rsp + 0x28]
call fcn.6a945188
mov rcx, r14
call fcn.6a945188
mov rcx, rsi
call fcn.6a9451f8
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 2
je 0x6a9447a4
lea rdx, str._register
mov rcx, r12
call fcn.6a942f04
jmp 0x6a9447b6
or eax, 2
mov rcx, qword [rsp + 0x50]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
jmp 0x6a944793
lea r14, [rsp + 0x70]
mov r9, r13
mov rdx, r12
mov r8, r14
lea rcx, [0x6a94d0a0]
call fcn.6a943a2e
mov ebx, eax
mov rcx, r12
call fcn.6a945188
cmp ebx, 0xe8
jne 0x6a9448f8
mov r8d, 0x10
mov rdx, rdi
mov rcx, r12
call fcn.6a9451f0
lea rcx, [rsp + 0x3a0]
mov rdx, r13
call fcn.6a9450b0
mov rcx, r12
call fcn.6a9451f8
mov rcx, r12
call fcn.6a9451e8
jmp 0x6a9448f8
mov rcx, r14
call fcn.6a945188
mov rcx, rsi
call fcn.6a9451e8
mov rcx, rdi
call fcn.6a945188
mov rax, r13
add rsp, 0x578
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret