Function at 0x259e755f0
Capabilities:
Get file attributes
Query environment variable
Set file attributes

Disassembly:
movabs rax, 0x34e84e05467d6ebf
push rbp
mov rbp, rsp
push r15
push r14
push r13
movabs r13, 0x4088a5c52e26d560
push r12
movabs r12, 0x349b3d60251e0fe3
push rdi
push rsi
mov rsi, rcx
push rbx
and rsp, 0xfffffffffffffff0
sub rsp, 0x580
mov qword [rsp + 0x1a0], rax
lea rbx, [rsp + 0x390]
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x1a8], r13
mov rdx, rax
mov rcx, rbx
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r13
vmovdqa xmm1, xmmword [rsp + 0x50]
vpxor xmm0, xmm1, xmmword [rsp + 0x1a0]
mov qword [rsp + 0x48], rax
vmovdqa xmmword [rsp + 0x1a0], xmm0
call fcn.259efe6b0
mov qword [rsp + 0x168], r13
movabs rax, 0x349b3d6075534ab7
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r13
vmovdqa xmm2, xmmword [rsp + 0x50]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x160]
vpxor xmm0, xmm2, xmmword [rsp + 0x160]
mov rcx, rax
mov qword [rsp + 0x50], rax
vmovdqa xmmword [rsp + 0x160], xmm0
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
mov r8, rbx
mov rdx, rax
lea rax, [rsp + 0xc0]
mov rcx, rax
mov qword [rsp + 0x40], rax
call fcn.259f0e4f0
mov rcx, rbx
call fcn.259efa9f0
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov r8d, 0x18
call fcn.259ee2630
lea rax, [rsp + 0xe0]
xor edx, edx
mov byte [rsi + 0x10], 0
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xe0], rax
xor eax, eax
cmp dword [rsp + 0x2a8], 0
mov qword [rsp + 0xe8], rax
lea rax, [rsi + 0x10]
mov byte [rsp + 0xf0], 0
mov qword [rsi], rax
mov qword [rsi + 8], rdx
je 0x259e75905
mov qword [rsp + 0x98], r13
movabs rax, 0x349b3d6040736e8d
lea rdi, [rsp + 0x100]
lea r14, [rsp + 0x3d0]
mov qword [rsp + 0x30], r12
mov rcx, rdi
lea r15, [rsp + 0x410]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x38], r13
vmovdqa xmm3, xmmword [rsp + 0x30]
vpxor xmm0, xmm3, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call fcn.259e75dc0
mov r8, rdi
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.259ef6460
mov qword [rsp + 0x30], r12
xor edx, edx
xor ecx, ecx
movabs rax, 0x349b3d60257a7880
mov qword [rsp + 0x38], r13
vmovdqa xmm4, xmmword [rsp + 0x30]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xa0], rax
vpxor xmm0, xmm4, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea rdx, [rsp + 0xa0]
lea r8, [rsp + 0x80]
mov rcx, r14
mov qword [rsp + 0x80], rax
call fcn.259ef6490
mov qword [rsp + 0xb8], r13
movabs rax, 0x349b3d6042717d93
mov qword [rsp + 0x30], r12
lea r12, [rsp + 0x120]
mov qword [rsp + 0x38], r13
vmovdqa xmm5, xmmword [rsp + 0x30]
mov rcx, r12
lea r13, [rsp + 0x140]
mov qword [rsp + 0xb0], rax
vpxor xmm0, xmm5, xmmword [rsp + 0xb0]
vmovdqa xmmword [rsp + 0xb0], xmm0
call sym.blitznet.dll_get_exe_name_abi:cxx11___
mov r8, r12
lea rdx, [rsp + 0xb0]
mov rcx, r15
call fcn.259ef6460
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x68], 3
call fcn.259eea130
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call fcn.259e72ef0
mov rcx, qword [rsp + 0x28]
mov rdx, r13
call fcn.259efe820
mov rcx, r13
call fcn.259efa9f0
mov rcx, qword [rsp + 0x50]
call fcn.259ed3d70
mov rcx, r15
call fcn.259ef64c0
mov rcx, r14
call fcn.259ef64c0
mov rcx, rbx
call fcn.259ef64c0
mov rcx, r12
call fcn.259efa9f0
mov rcx, rdi
call fcn.259efa9f0
jmp 0x259e75b1e
mov rcx, qword [rsp + 0x48]
mov rdx, rsi
lea rdi, [rsp + 0x100]
call fcn.259f0efe0
mov qword [rsp + 0x88], r13
mov rcx, rdi
movabs rax, 0x349b3d6040736e8d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r13
vmovdqa xmm1, xmmword [rsp + 0x30]
mov qword [rsp + 0x80], rax
vpxor xmm0, xmm1, xmmword [rsp + 0x80]
vmovdqa xmmword [rsp + 0x80], xmm0
call fcn.259e75dc0
mov r8, rdi
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.259ef6460
mov qword [rsp + 0x30], r12
xor edx, edx
xor ecx, ecx
movabs rax, 0x349b3d60257a7880
mov qword [rsp + 0x38], r13
vmovdqa xmm2, xmmword [rsp + 0x30]
mov qword [rsp + 0x98], r13
mov qword [rsp + 0x90], rax
vpxor xmm0, xmm2, xmmword [rsp + 0x90]
vmovdqa xmmword [rsp + 0x90], xmm0
call sub.api_ms_win_crt_stdio_l1_1_0.dll__getcwd
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x3d0]
mov qword [rsp + 0x78], rax
call fcn.259ef6490
mov qword [rsp + 0xa8], r13
movabs rax, 0x349b3d6041777a96
lea rdx, [rsp + 0xa0]
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x410]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x38], r13
vmovdqa xmm3, xmmword [rsp + 0x30]
vpxor xmm0, xmm3, xmmword [rsp + 0xa0]
vmovdqa xmmword [rsp + 0xa0], xmm0
call fcn.259efe6b0
mov rdx, rsi
lea rcx, [rsp + 0x430]
call fcn.259efda90
mov qword [rsp + 0xb8], r13
movabs rax, 0x349b3d6042717d93
mov qword [rsp + 0x30], r12
lea r12, [rsp + 0x120]
mov qword [rsp + 0x38], r13
vmovdqa xmm4, xmmword [rsp + 0x30]
mov rcx, r12
lea r13, [rsp + 0x140]
mov qword [rsp + 0xb0], rax
vpxor xmm0, xmm4, xmmword [rsp + 0xb0]
vmovdqa xmmword [rsp + 0xb0], xmm0
call sym.blitznet.dll_get_exe_name_abi:cxx11___
mov r8, r12
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x450]
call fcn.259ef6460
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x68], 4
call fcn.259eea130
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call fcn.259e72ef0
mov rcx, qword [rsp + 0x28]
mov rdx, r13
call fcn.259efe820
mov rcx, r13
lea r13, [rsp + 0x490]
call fcn.259efa9f0
mov rcx, qword [rsp + 0x50]
call fcn.259ed3d70
sub r13, 0x40
mov rcx, r13
call fcn.259ef64c0
cmp r13, rbx
jne 0x259e75af3
mov rcx, r12
call fcn.259efa9f0
mov rcx, rdi
call fcn.259efa9f0
mov rcx, qword [rsp + 0x48]
call fcn.259ee21c0
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 2
jne 0x259e75b43
or eax, 2
mov rcx, qword [rsp + 0xc0]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
movabs rax, 0x51ef4e09427b7dcc
lea r12, [rsp + 0xe0]
mov qword [rsp + 0x160], rax
movabs rax, 0x4088a5c52e26d512
mov qword [rsp + 0x168], rax
movabs rax, 0x349b3d60251e0fe3
mov qword [rsp + 0x30], rax
movabs rax, 0x4088a5c52e26d560
mov qword [rsp + 0x38], rax
vmovdqa xmm5, xmmword [rsp + 0x30]
vpxor xmm0, xmm5, xmmword [rsp + 0x160]
vmovdqa xmmword [rsp + 0x160], xmm0
call fcn.259efe6b0
mov r9, rsi
mov r8, r12
mov rdx, rbx
lea rcx, [0x259f152a0]
call fcn.259e74770
mov rcx, rbx
mov edi, eax
call fcn.259efa9f0
cmp edi, 0xe8
jne 0x259e75c0c
mov rdx, qword [rsp + 0x40]
mov r8d, 0x10
mov rcx, rbx
call fcn.259ee2630
lea rcx, [rsp + 0x3a0]
mov rdx, rsi
call fcn.259f0e090
mov rcx, rbx
call fcn.259ee21c0
mov rcx, rbx
call fcn.259ee2fa0
mov rcx, r12
call fcn.259efa9f0
mov rcx, qword [rsp + 0x48]
call fcn.259ee2fa0
mov rcx, qword [rsp + 0x40]
call fcn.259efa9f0
lea rsp, [rbp - 0x38]
mov rax, rsi
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret