Function at 0x14001b430
Capabilities:
Get file size
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rcx + 8], 1
xor r13d, r13d
mov dword [rcx + 0x41c], r13d
mov byte [rcx + 8], 1
xor edx, edx
mov r8d, 0x410
add rcx, 0xa
call fcn.14001f5c0
lea rax, vtable.FileWrapper.0
mov qword [rdi], rax
lea r14, [rdi + 0x420]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [r15 + rbx*2], r13w
jne 0x14001b4a0
movabs rbp, 0x7ffffffffffffffe
cmp rbx, rbp
ja 0x14001b710
mov qword [r14 + 0x18], 7
cmp rbx, 8
jae 0x14001b4ea
mov qword [r14 + 0x10], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14001f9c0
mov word [rbx + r14], r13w
jmp 0x14001b597
mov rax, rbx
or rax, 7
cmp rax, rbp
jbe 0x14001b506
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14001b538
mov rbp, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbp, rcx
lea rcx, [rbp + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14001b70a
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001b564
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001b70a
mov rcx, rax
call fcn.14001c9fc
test rax, rax
je 0x14001b704
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14001b576
test rcx, rcx
je 0x14001b573
call fcn.14001c9fc
mov rsi, rax
jmp 0x14001b576
mov rsi, r13
mov qword [r14], rsi
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rbp
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.14001f9c0
mov word [rbx + rsi], r13w
mov qword [rdi + 0x440], 0xffffffffffffffff
mov dword [rdi + 0x448], 1
mov qword [rdi + 0x450], r13
mov qword [rdi + 0x458], r13
mov esi, r13d
lea rbx, [rdi + 0x420]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov qword [rdi + 0x440], rax
cmp rax, 0xffffffffffffffff
jne 0x14001b6af
call qword [sym.imp.KERNEL32.DLL_GetLastError]
sub eax, 5
je 0x14001b63f
sub eax, 0x1b
je 0x14001b61f
cmp eax, 1
jne 0x14001b687
mov dword [rdi + 0x448], 3
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b636
mov r8, qword [rbx]
lea rdx, str.In_use_another_process:__s
jmp 0x14001b673
mov edx, 0x80
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
mov rcx, r15
call fcn.14001bc00
mov dword [rdi + 0x448], 2
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b66c
mov r8, qword [rbx]
lea rdx, str.No_permission:__s
mov rcx, rdi
call fcn.140004400
inc esi
cmp esi, 2
jge 0x14001b6cb
jmp 0x14001b5d0
cmp qword [rbx + 0x18], 8
jb 0x14001b691
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, str.Cant_open:__s
mov rcx, rdi
call fcn.140004400
mov dword [rdi + 0x448], 1
jmp 0x14001b6cb
mov dword [rdi + 0x448], r13d
mov byte [rdi + 8], 1
xor edx, edx
mov r8d, 0x410
lea rcx, [rdi + 0xa]
call fcn.14001f5c0
cmp dword [rdi + 0x448], 0
jne 0x14001b6e9
lea rdx, [rdi + 0x450]
mov rcx, qword [rdi + 0x440]
call qword [sym.imp.KERNEL32.DLL_GetFileSizeEx]
nop
mov rax, rdi
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140026650
int3
call fcn.140004354
int3
call fcn.1400043ec
int3