Function at 0x6a944511
Capabilities:
Get file attributes
Query environment variable
Set file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x578
lea rdx, str._access
lea r12, [rsp + 0x390]
mov r13, rcx
lea rdi, [rsp + 0x50]
mov rcx, r12
call fcn.6a942f6e
lea rcx, str.TEMP
call sub.msvcrt.dll_getenv
mov r8, r12
mov rcx, rdi
mov rdx, rax
call fcn.6a9472c0
mov rcx, r12
lea rsi, [rsp + 0x1b0]
call fcn.6a9451f8
mov r8d, 0x18
mov rdx, rdi
mov rcx, rsi
call fcn.6a945260
lea rax, [rsp + 0x80]
cmp dword [rsp + 0x2a8], 0
mov qword [rsp + 0x78], 0
lea r14, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rax, [r13 + 0x10]
lea rbp, [rsp + 0x48]
mov qword [r13], rax
lea rax, [rsp + 0xb0]
lea r15, [rsp + 0xf0]
mov byte [rsp + 0x80], 0
mov qword [r13 + 8], 0
mov byte [r13 + 0x10], 0
mov qword [rsp + 0x28], rax
je 0x6a9446d7
mov rcx, r14
call fcn.6a943bf0
lea rdx, str.name
mov rcx, r15
call fcn.6a942f6e
lea rcx, [rsp + 0x110]
mov rdx, r14
call fcn.6a945198
xor edx, edx
xor ecx, ecx
call sub.msvcrt.dll__getcwd
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x130]
mov rdx, rbp
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.6a943f12
lea rbp, [rsp + 0xd0]
mov rcx, rbp
call sym.main.dll_get_exe_name_abi:cxx11___
lea rax, [rsp + 0x170]
lea rdx, str.prog
mov rcx, rax
mov qword [rsp + 0x38], rax
call fcn.6a942f6e
lea rcx, [rsp + 0x190]
mov rdx, rbp
call fcn.6a945198
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.6a94422c
mov rcx, qword [rsp + 0x28]
mov rdx, r12
call fcn.6a941cea
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x70]
call fcn.6a945188
mov rcx, qword [rsp + 0x28]
call fcn.6a9451f8
mov rcx, r12
call fcn.6a941570
mov rcx, qword [rsp + 0x38]
call fcn.6a94147e
mov rcx, qword [rsp + 0x30]
call fcn.6a94147e
mov rcx, r15
call fcn.6a94147e
mov rcx, rbp
call fcn.6a9451f8
mov rcx, r14
call fcn.6a9451f8
jmp 0x6a9447f6
mov rdx, r13
mov rcx, rsi
call fcn.6a945118
mov rcx, r14
call fcn.6a943bf0
lea rdx, str.name
mov rcx, r12
call fcn.6a942f6e
lea rcx, [rsp + 0x3b0]
mov rdx, r14
call fcn.6a945198
xor edx, edx
xor ecx, ecx
call sub.msvcrt.dll__getcwd
lea rcx, [rsp + 0x3d0]
mov rdx, rbp
mov qword [rsp + 0x48], rax
call fcn.6a943f12
lea rbp, [rsp + 0x410]
lea rdx, str.uuid
mov rcx, rbp
call fcn.6a942f6e
lea rcx, [rsp + 0x430]
mov rdx, r13
call fcn.6a945190
jmp 0x6a944755
mov rcx, qword [rsp + 0x28]
call sym.main.dll_get_exe_name_abi:cxx11___
lea rcx, [rsp + 0x450]
lea rdx, str.prog
call fcn.6a942f6e
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x470]
lea rbx, [rsp + 0x490]
call fcn.6a945198
mov r8, rbx
mov rdx, r12
mov rcx, r15
call fcn.6a94422c
lea rbp, [rsp + 0xd0]
mov rdx, r15
mov rcx, rbp
call fcn.6a941cea
lea rcx, [rsp + 0x70]
mov rdx, rbp
call fcn.6a945188
mov rcx, rbp
call fcn.6a9451f8
mov rcx, r15
call fcn.6a941570
sub rbx, 0x40
mov rcx, rbx
call fcn.6a94147e
cmp rbx, r12
jne 0x6a9447cb
mov rcx, qword [rsp + 0x28]
call fcn.6a9451f8
mov rcx, r14
call fcn.6a9451f8
mov rcx, rsi
call fcn.6a945268
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 2
je 0x6a944816
lea rdx, str._register
mov rcx, r12
call fcn.6a942f6e
jmp 0x6a944828
or eax, 2
mov rcx, qword [rsp + 0x50]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
jmp 0x6a944805
lea r14, [rsp + 0x70]
mov r9, r13
mov rdx, r12
mov r8, r14
lea rcx, [0x6a94d0a0]
call fcn.6a9439af
mov ebx, eax
mov rcx, r12
call fcn.6a9451f8
cmp ebx, 0xe8
jne 0x6a94496a
mov r8d, 0x10
mov rdx, rdi
mov rcx, r12
call fcn.6a945260
lea rcx, [rsp + 0x3a0]
mov rdx, r13
call fcn.6a945120
mov rcx, r12
call fcn.6a945268
mov rcx, r12
call fcn.6a945258
jmp 0x6a94496a
mov rcx, r14
call fcn.6a9451f8
mov rcx, rsi
call fcn.6a945258
mov rcx, rdi
call fcn.6a9451f8
mov rax, r13
add rsp, 0x578
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret