Function at 0x7fffb6da9ff0
Capabilities:
Clear file content
Move file
Set file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x48
mov rbx, rcx
or rsi, 0xffffffffffffffff
mov rcx, qword [rcx + 0x10]
cmp rcx, rsi
je 0x7fffb6daa1b2
call qword [sym.imp.KernelBase.dll_SetEndOfFile]
test eax, eax
je 0x7fffb6daa1d8
mov rax, qword [rbx + 0x28]
lea r9, [rbp + 0x28]
mov rcx, qword [rbx + 0x10]
lea r8, [rbp + 0x30]
shr rax, 0x20
lea rdx, [rbp + 0x38]
mov dword [rbp + 0x3c], eax
mov eax, dword [rbx + 0x28]
mov dword [rbp + 0x38], eax
mov rax, qword [rbx + 0x30]
shr rax, 0x20
mov dword [rbp + 0x34], eax
mov eax, dword [rbx + 0x30]
mov dword [rbp + 0x30], eax
mov rax, qword [rbx + 0x38]
shr rax, 0x20
mov dword [rbp + 0x2c], eax
mov eax, dword [rbx + 0x38]
mov dword [rbp + 0x28], eax
call qword [sym.imp.KernelBase.dll_SetFileTime]
test eax, eax
je 0x7fffb6daa200
xor edi, edi
cmp qword [rbx + 0x20], rdi
je 0x7fffb6daa191
mov rax, qword [rbx + 8]
cmp dword [rax + 0x158], 2
jae 0x7fffb6daa103
mov rcx, qword [rbx + 0x18]
mov edx, 0x80
call qword [sym.imp.KernelBase.dll_SetFileAttributesW]
mov rdx, qword [rbx + 0x18]
lea r8d, [rsi + 2]
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.KernelBase.dll_MoveFileExW]
test eax, eax
jne 0x7fffb6daa118
call fcn.7fffb6d96f60
mov rcx, qword [rbx + 0x18]
lea r9, str.MoveFileExW_failed__source:__s__destination:__s__hr_0x_x
mov dword [rsp + 0x30], eax
lea r8, str.DpxOutputFile::Close
mov qword [rsp + 0x28], rcx
mov edx, 0x173
mov rcx, qword [rbx + 0x20]
mov edi, eax
mov qword [rsp + 0x20], rcx
lea rcx, str.onecore_basecompressdpx_srcdpxout.cpp
call fcn.7fffb6d96d30
cmp edi, 0x80070020
je 0x7fffb6daa0f9
cmp edi, 0x80070005
jne 0x7fffb6daa122
mov rax, qword [rbx + 8]
inc dword [rax + 0x158]
mov rcx, qword [rbx + 0x10]
mov qword [rbx + 0x10], rsi
cmp rcx, rsi
je 0x7fffb6daa122
call qword [sym.imp.KernelBase.dll_CloseHandle]
jmp 0x7fffb6daa122
mov rax, qword [rbx + 8]
and dword [rax + 0x158], edi
cmp qword [rbx + 0x10], rsi
jne 0x7fffb6daa170
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
call fcn.7fffb6d97c48
mov edi, eax
test eax, eax
jns 0x7fffb6daa178
mov dword [rsp + 0x30], eax
lea r9, str.DpxMoveFileExW_failed__source:__s__destination:__s__hr_0x_x
mov rax, qword [rbx + 0x18]
lea r8, str.DpxOutputFile::Close
mov qword [rsp + 0x28], rax
lea rcx, str.onecore_basecompressdpx_srcdpxout.cpp
mov rax, qword [rbx + 0x20]
mov edx, 0x194
mov qword [rsp + 0x20], rax
call fcn.7fffb6d96d30
test edi, edi
js 0x7fffb6daa228
cmp qword [rbx + 0x10], rsi
je 0x7fffb6daa191
mov rcx, qword [rbx + 0x10]
mov qword [rbx + 0x10], rsi
cmp rcx, rsi
je 0x7fffb6daa191
call qword [sym.imp.KernelBase.dll_CloseHandle]
mov edx, dword [rbx + 0x40]
lea rdi, [rbx + 0x18]
mov rcx, qword [rdi]
call qword [sym.imp.KernelBase.dll_SetFileAttributesW]
test eax, eax
je 0x7fffb6daa24b
add rsp, 0x48
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r9d, 0x80070006
lea rcx, [rbp + 0x40]
mov r8d, 0x20601
call fcn.7fffb6d81278
lea rdx, [0x7fffb6df49d0]
lea rcx, [rbp + 0x40]
call sub.msvcrt.dll__CxxThrowException
int3
call fcn.7fffb6d96f60
mov r9d, eax
lea rcx, [rbp + 0x40]
mov r8d, 0x20602
call fcn.7fffb6d81278
lea rdx, [0x7fffb6df49d0]
lea rcx, [rbp + 0x40]
call sub.msvcrt.dll__CxxThrowException
int3
call fcn.7fffb6d96f60
mov r9d, eax
lea rcx, [rbp + 0x40]
mov r8d, 0x20604
call fcn.7fffb6d81278
lea rdx, [0x7fffb6df49d0]
lea rcx, [rbp + 0x40]
call sub.msvcrt.dll__CxxThrowException
int3
mov r9d, edi
lea rcx, [rbp + 0x40]
mov r8d, 0x20603
call fcn.7fffb6d81278
lea rdx, [0x7fffb6df49d0]
lea rcx, [rbp + 0x40]
call sub.msvcrt.dll__CxxThrowException
int3
call fcn.7fffb6d96f60
mov rcx, rdi
mov ebx, eax
call fcn.7fffb6d8c144
mov dword [rsp + 0x28], ebx
lea r9, str.SetFileAttributesW_Failed_for_file:__s__hr_0x_x
lea r8, str.DpxOutputFile::Close
lea rcx, str.onecore_basecompressdpx_srcdpxout.cpp
mov rdx, qword [rax]
mov qword [rsp + 0x20], rdx
mov edx, 0x1b0
call fcn.7fffb6d96d30
mov r9d, ebx
lea rcx, [rbp + 0x40]
mov r8d, 0x20611
call fcn.7fffb6d81278
lea rdx, [0x7fffb6df49d0]
lea rcx, [rbp + 0x40]
call sub.msvcrt.dll__CxxThrowException
int3