Function at 0x140137a10
Capabilities:
Set file attributes

Disassembly:
mov byte [rsp + 8], cl
sub rsp, 0xf8
movabs rax, 0x7bea4e4e85001e
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x68], rax
movabs rax, 0x71a995483060ce
cmp qword [rsp + 0x68], rax
je 0x140137e10
movabs rax, 0x7bea4e4e85001e
cmp qword [rsp + 0x68], rax
je 0x140137a5f
jmp 0x140137e32
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x70], rax
movabs rax, 0x781ec76ea4139a
cmp qword [rsp + 0x70], rax
je 0x140137a90
movabs rax, 0x7985dce5a23ae5
cmp qword [rsp + 0x70], rax
je 0x140137b06
jmp 0x140137b23
mov edx, 0xec
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x54], al
cmp byte [rsp + 0x54], 0x2d
je 0x140137ac3
cmp byte [rsp + 0x54], 0xc1
je 0x140137aea
jmp 0x140137b04
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x20], al
mov r9d, 0x7c
mov r8d, 0xe
mov dl, 0xc1
mov rcx, qword [rsp + 0x38]
call fcn.140137660
nop
jmp 0x140137b04
movabs rax, 0x7ddf3bce71a696
mov rcx, qword [rsp + 0x38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
jmp 0x140137b23
mov rax, qword [rsp + 0x38]
sar rax, 0x3c
mov qword [rsp + 0x38], rax
mov dx, 0x99
mov rcx, qword [rsp + 0x38]
call fcn.1401374e0
nop
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x80], rax
movabs rax, 0x7bea4e4e85001e
cmp qword [rsp + 0x80], rax
je 0x140137b49
jmp 0x140137c00
movabs rax, 0x7578da2b1b50eb
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x38]
shl rax, 0xc6
movabs rcx, 0x7ca4f4f4feb594
cmp rax, rcx
jne 0x140137bfe
lea r9, [rsp + 0xa8]
mov r8d, 0xe8
mov edx, 0x3c
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.GDI32.dll_MoveToEx]
mov dword [rsp + 0x5c], eax
movabs rax, 0x774c4da04d92d0
mov rcx, qword [rsp + 0x38]
xor rcx, rax
mov rax, rcx
movabs rcx, 0x77ce3e623a3585
cmp rax, rcx
jg 0x140137bfe
mov byte [rsp + 0x100], 0x8e
lea r8, [rsp + 0x58]
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov dword [rsp + 0x5c], eax
movabs rax, 0x7672107acc0eb0
mov rcx, qword [rsp + 0x48]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
jmp 0x140137c53
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.GDI32.dll_GetROP2]
mov dword [rsp + 0x50], eax
mov byte [rsp + 0x100], 0xe1
movzx ecx, byte [rsp + 0x100]
call fcn.140137a10
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.GDI32.dll_BeginPath]
mov dword [rsp + 0x58], eax
movabs rax, 0x7b3cc0195c1476
mov rcx, qword [rsp + 0x38]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
cmp dword [rsp + 0x50], 0x4e8c
jge 0x140137c84
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x45], al
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x90], rax
mov byte [rsp + 0x44], 0x3a
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0x46], al
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x30], al
mov eax, 0x729
mov word [rsp + 0x40], ax
mov eax, dword [rsp + 0x50]
add eax, 0x3761
cmp eax, 0x441c
jne 0x140137d11
movzx eax, byte [rsp + 0x30]
movzx ecx, byte [rsp + 0x100]
and eax, ecx
movzx ecx, byte [rsp + 0x45]
cmp eax, ecx
jle 0x140137ce6
movzx eax, word [rsp + 0x40]
mov word [rsp + 0x20], ax
mov r9, qword [rsp + 0x38]
mov r8d, 0xa
mov rdx, qword [rsp + 0x48]
mov cx, 0x43
call fcn.140136d90
nop
mov dword [rsp + 0x20], 0xd8
mov r9d, 0x93
mov r8d, 0x22
mov edx, 0x48
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.GDI32.dll_Ellipse]
mov dword [rsp + 0x60], eax
movabs rax, 0x70f829fab581b0
cmp qword [rsp + 0x48], rax
je 0x140137d44
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0xd8], rax
movabs rax, 0x72756729cb3107
mov rcx, qword [rsp + 0x48]
imul rcx, rax
mov rax, rcx
movabs rcx, 0x7a6169c9852a4c
cmp rax, rcx
jne 0x140137d9c
mov dword [rsp + 0x50], 0xfd8
movzx eax, byte [rsp + 0x100]
mov byte [rsp + 0x20], al
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x48]
movzx edx, byte [rsp + 0x46]
mov rcx, qword [rsp + 0x90]
call fcn.140137660
nop
jmp 0x140137e0e
movsx eax, word [rsp + 0x40]
add eax, 0x4a7
mov word [rsp + 0x40], ax
lea r9, [rsp + 0xa0]
mov r8d, 0x81
mov edx, 0x8e
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.GDI32.dll_OffsetWindowOrgEx]
mov dword [rsp + 0x5c], eax
movabs rax, 0x723097138e9e97
mov rcx, qword [rsp + 0x48]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x48], rax
movzx eax, word [rsp + 0x40]
mov word [rsp + 0x20], ax
mov r9, qword [rsp + 0x38]
mov r8d, 0x79
mov rdx, qword [rsp + 0x48]
mov cx, 0x8f
call fcn.140136d90
nop
jmp 0x140137e32
mov byte [rsp + 0x100], 0x2b
movabs rax, 0x7324c53a3f9687
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
movabs rax, 0x70e64f4fa80dbd
cmp qword [rsp + 0x38], rax
jg 0x140137e87
movzx ecx, byte [rsp + 0x100]
call fcn.140137a10
mov byte [rsp + 0x100], 0x52
mov r9d, 0x75
lea r8, [rsp + 0x38]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [rsp + 0x7c], eax
mov byte [rsp + 0x100], 0xa1
jmp 0x140137eb2
mov dword [rsp + 0x20], 0xfd
mov r9d, 0x2f
mov r8d, 0xf3
mov edx, 0xe9
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [rsp + 0x60], eax
mov eax, 3
add rsp, 0xf8
ret