Function at 0x14011fea0
Capabilities:
Clear file content
Set file attributes

Disassembly:
push rsi
sub rsp, 0x70
or rsi, 0xffffffffffffffff
call fcn.14011ed30
test eax, eax
je 0x14011fed1
mov rcx, qword [0x1404972f0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__get_osfhandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rcx, qword [0x1404972f0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
cmp dword [0x1403a709c], 0
jne 0x1401201a3
cmp dword [0x1403a70a4], 1
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x58], rdi
jg 0x14011ff4f
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x90]
call fcn.140120780
xor ebx, ebx
lea rcx, [0x14049731c]
mov qword [rsp + 0x30], rbx
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x40000000
mov edi, eax
mov dword [rsp + 0x20], 3
lea r8d, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
jmp 0x14011ff53
xor ebx, ebx
mov edi, ebx
mov rax, qword [0x140487170]
mov edx, dword [rax + 0x24]
test dl, 0x5f
je 0x14011ffaf
and edx, 0x7f
lea rcx, [0x14049731c]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x14011ffaf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str._nwarning___d_:_could_not_set_file_attributes_n
lea rcx, [0x140487178]
call fcn.1400e1500
mov r8d, eax
lea rdx, [0x140487178]
mov r9d, 1
lea rcx, [0x1403a7080]
call qword [0x140497538]
mov rcx, qword [0x1404971e0]
test rcx, rcx
je 0x1401200c2
movzx edx, word [0x140497210]
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x88]
call fcn.14011ec50
test eax, eax
je 0x1401200c2
mov rax, qword [0x140487170]
lea rcx, [0x14049731c]
mov r8, qword [rsp + 0x88]
mov qword [rsp + 0x60], rbp
mov ebp, dword [rsp + 0x80]
mov r9d, ebp
mov edx, dword [rax + 0x24]
call fcn.14011f270
cmp eax, 0x4f
jne 0x1401200bd
mov eax, dword [0x1403a70c4]
test eax, eax
je 0x140120075
mov r8d, 0x4000
lea rdx, [0x14048f178]
lea rcx, [0x14049731c]
call fcn.1401608c0
mov r8, rax
lea rdx, [0x14025f800]
lea rcx, [0x140487178]
call fcn.1400e1500
mov r8d, eax
lea rdx, [0x140487178]
mov r9d, 1
lea rcx, [0x1403a7080]
call qword [0x140497538]
mov eax, dword [0x1403a70c4]
test eax, eax
lea rcx, [0x1402be6ec]
lea r9, [0x1402b3878]
cmovne r9, rcx
lea r8d, [rbp - 0xb]
lea rcx, [0x140487178]
lea rdx, str._compressed_WinNT_security_data_missing___d_bytes__s
call fcn.1400e1500
mov r8d, eax
lea rdx, [0x140487178]
mov r9d, 1
lea rcx, [0x1403a7080]
call qword [0x140497538]
mov rbp, qword [rsp + 0x60]
cmp dword [0x1403a70a4], 1
jg 0x140120199
cmp rsi, 0xffffffffffffffff
jne 0x14012011c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str._nCreateFile___error__d_when_trying_set_file_time_n
lea rcx, [0x140487178]
call fcn.1400e1500
mov r8d, eax
lea r9d, [rsi + 2]
lea rdx, [0x140487178]
lea rcx, [0x1403a7080]
call qword [0x140497538]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
add rsp, 0x70
pop rsi
ret
test edi, edi
je 0x140120190
mov eax, edi
lea r9, [rsp + 0x90]
and al, 1
lea r8, [rsp + 0x98]
mov eax, edi
lea rdx, [rsp + 0x40]
cmove r9, rbx
mov rcx, rsi
and al, 2
cmove r8, rbx
and dil, 4
cmove rdx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x140120190
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str._nSetFileTime_failed:__d_n
lea rcx, [0x140487178]
call fcn.1400e1500
mov r8d, eax
lea rdx, [0x140487178]
xor r9d, r9d
lea rcx, [0x1403a7080]
call qword [0x140497538]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
add rsp, 0x70
pop rsi
ret