Function at 0x14001af00
Capabilities:
Get file size
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rcx + 8], 1
xor r12d, r12d
mov dword [rcx + 0x41c], r12d
mov byte [rcx + 8], 1
add rcx, 0xa
xor edx, edx
mov r8d, 0x410
call fcn.14003c460
lea rax, vtable.FileWrapper.0
mov qword [rdi], rax
lea r14, [rdi + 0x420]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], r12
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [r15 + rbx*2], r12w
jne 0x14001af70
movabs rbp, 0x7ffffffffffffffe
cmp rbx, rbp
ja 0x14001b1e6
mov qword [r14 + 0x18], 7
cmp rbx, 7
ja 0x14001afba
mov qword [r14 + 0x10], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14003c820
mov word [rbx + r14], r12w
jmp 0x14001b067
mov rax, rbx
or rax, 7
cmp rax, rbp
jbe 0x14001afd6
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14001b008
mov rbp, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbp, rcx
lea rcx, [rbp + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14001b1e0
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001b034
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001b1e0
mov rcx, rax
call fcn.14001c6fc
test rax, rax
je 0x14001b1da
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14001b046
test rcx, rcx
je 0x14001b043
call fcn.14001c6fc
mov rsi, rax
jmp 0x14001b046
mov rsi, r12
mov qword [r14], rsi
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rbp
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.14003c820
mov word [rbx + rsi], r12w
mov qword [rdi + 0x440], 0xffffffffffffffff
mov dword [rdi + 0x448], 1
mov qword [rdi + 0x450], r12
mov qword [rdi + 0x458], r12
mov esi, r12d
lea rbx, [rdi + 0x420]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x10000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x440], rax
cmp rax, 0xffffffffffffffff
jne 0x14001b184
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x14001b10f
sub eax, 0x1b
je 0x14001b0ef
cmp eax, 1
jne 0x14001b158
mov dword [rdi + 0x448], 3
mov r8, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14001b106
mov r8, qword [rbx]
lea rdx, str.In_use_another_process:__s
jmp 0x14001b143
mov edx, 0x80
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, r15
call fcn.14001bd70
mov dword [rdi + 0x448], 2
mov r8, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14001b13c
mov r8, qword [rbx]
lea rdx, str.No_permission:__s
mov rcx, rdi
call fcn.140003dec
inc esi
cmp esi, 2
jl 0x14001b0a0
jmp 0x14001b1a0
lea r8, [rdi + 0x420]
cmp qword [r8 + 0x18], 7
jbe 0x14001b169
mov r8, qword [r8]
lea rdx, str.Cant_open:__s
mov rcx, rdi
call fcn.140003dec
mov dword [rdi + 0x448], 1
jmp 0x14001b1a0
mov dword [rdi + 0x448], r12d
mov byte [rdi + 8], 1
lea rcx, [rdi + 0xa]
xor edx, edx
mov r8d, 0x410
call fcn.14003c460
cmp dword [rdi + 0x448], 0
jne 0x14001b1be
lea rdx, [rdi + 0x450]
mov rcx, qword [rdi + 0x440]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop
mov rax, rdi
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.140026710
int3
call fcn.140003d40
int3
call fcn.140003dd8
int3