Function at 0x1800de2c0
Capabilities:
Set file attributes

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x578]
sub rsp, 0x650
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x18036d060]
xor rax, rsp
mov qword [rbp + 0x540], rax
mov byte [rsp + 0x50], r9b
movzx r14d, r8b
movzx r13d, dl
mov rbx, rcx
mov r15, qword [rbp + 0x5b8]
mov qword [rsp + 0x60], r15
mov rsi, qword [rbp + 0x5c0]
xor edi, edi
mov dword [r15], edi
xor edx, edx
mov r8d, 0x170
lea rcx, [rbp - 0x80]
call fcn.180211600
lea rcx, [rbp - 0x80]
call fcn.1800bfb10
nop
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.1800c0ae0
mov r8b, 0x5c
mov dl, 0x2f
lea rcx, [rbp - 0x80]
call fcn.1800c3ab0
cmp byte [rbp + 0x5b0], dil
je 0x1800de376
xor r8d, r8d
movzx edx, r14b
lea rcx, [rbp - 0x80]
call fcn.1800dd130
lea rcx, [rbp - 0x80]
call fcn.1800c3810
test al, al
je 0x1800de398
mov rax, qword [rsi]
lea rdx, str.openFileWin32:_file_path_is_empty.
mov rcx, rsi
call qword [rax + 0x28]
jmp 0x1800de67b
lea rcx, [rbp - 0x80]
call fcn.1800c28e0
mov dword [rsp + 0x54], eax
mov ecx, 2
mov r12d, ecx
mov eax, pe_nt_image_headers64
cmp byte [rbp + 0x5a0], 0
cmove r12d, eax
test r13b, r13b
je 0x1800de3c8
lea ebx, [r14 + 3]
jmp 0x1800de3d0
mov ebx, edi
test r14b, r14b
cmovne ebx, ecx
mov eax, r13d
shl eax, 0x1f
mov r13d, eax
bts r13d, 0x1e
test r14b, r14b
cmove r13d, eax
mov eax, 3
cmp byte [rsp + 0x50], 0
cmovne eax, edi
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x78], edi
lea r14, [rbp - 0x80]
mov qword [rsp + 0x68], r14
xor edx, edx
mov r8d, 0x170
lea rcx, [rbp + 0x3d0]
call fcn.180211600
lea rcx, [rbp + 0x3d0]
call fcn.1800bfb10
nop
cmp dword [rsp + 0x54], 0
jl 0x1800de44a
xor r8d, r8d
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp - 0x80]
call fcn.1800dcf80
lea r14, [rbp + 0x3d0]
mov qword [rsp + 0x68], r14
mov rcx, r14
call fcn.1800c3600
mov rdx, rax
mov qword [rsp + 0x48], rsi
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdi
mov r9d, dword [rsp + 0x58]
mov r8d, r13d
mov ecx, 0x7d1
call fcn.18012ac60
mov r14, rax
test rax, rax
jne 0x1800de647
mov dword [rsp + 0x54], edi
mov dword [rsp + 0x7c], edi
mov r9, rsi
lea r8, [rsp + 0x7c]
lea rdx, [rsp + 0x54]
lea rcx, [rbp - 0x80]
call fcn.1800dc910
test al, al
je 0x1800de60b
mov r15d, dword [rsp + 0x54]
test r15b, 1
je 0x1800de606
and r15d, 0xfffffffe
xor edx, edx
mov r8d, 0x170
lea rcx, [rbp + 0xf0]
call fcn.180211600
lea rcx, [rbp + 0xf0]
call fcn.1800bfb10
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0xf0]
call fcn.1800c0ae0
mov r8b, 0x5c
mov dl, 0x2f
lea rcx, [rbp + 0xf0]
call fcn.1800c3ab0
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0xf0]
call fcn.1800dd130
lea rcx, [rbp + 0xf0]
call fcn.1800c3810
test al, al
jne 0x1800de591
xor edx, edx
mov r8d, 0x170
lea rcx, [rbp + 0x260]
call fcn.180211600
lea rcx, [rbp + 0x260]
call fcn.1800bfb10
nop
xor r8d, r8d
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xf0]
call fcn.1800dcf80
lea rcx, [rbp + 0x260]
call fcn.1800c3600
mov rcx, rax
mov edx, r15d
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov r15d, eax
lea rcx, [rbp + 0x260]
call fcn.1800bfb80
jmp 0x1800de5ac
lea rcx, [rbp + 0xf0]
call fcn.1800c3600
mov rcx, rax
mov edx, r15d
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov r15d, eax
lea rcx, [rbp + 0xf0]
call fcn.1800bfb80
test r15d, r15d
je 0x1800de606
mov rcx, qword [rsp + 0x68]
call fcn.1800c3600
mov rdx, rax
mov qword [rsp + 0x48], rsi
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdi
mov r9d, dword [rsp + 0x58]
mov r8d, r13d
mov ecx, 0x7d1
call fcn.18012ac60
mov r14, rax
test rax, rax
jne 0x1800de647
mov r15, qword [rsp + 0x60]
mov ecx, dword [rsp + 0x78]
cmp ecx, 5
je 0x1800de62b
lea eax, [rcx - 0x20]
cmp eax, 1
jbe 0x1800de62b
cmp ecx, 3
setne dil
add edi, 2
mov dword [r15], edi
jmp 0x1800de632
mov dword [r15], 1
lea r8, [rbp - 0x80]
lea rdx, str.localWindowsFilePath
mov rcx, rsi
call fcn.1801065f0
jmp 0x1800de66b
cmp byte [rbp + 0x5a8], 0
je 0x1800de66b
mov dword [rsp + 0x7c], edi
mov r9d, 2
lea r8, [rsp + 0x7c]
xor edx, edx
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov rdi, r14
lea rcx, [rbp + 0x3d0]
call fcn.1800bfb80
nop
lea rcx, [rbp - 0x80]
call fcn.1800bfb80
mov rax, rdi
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.18007b140
lea r11, [rsp + 0x650]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret