Function at 0x14001b440
Capabilities:
Get file size
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rcx + 8], 1
xor r13d, r13d
mov dword [rcx + 0x41c], r13d
mov byte [rcx + 8], 1
xor edx, edx
mov r8d, 0x410
add rcx, 0xa
call fcn.14001f140
lea rax, vtable.FileWrapper.0
mov qword [rdi], rax
lea r14, [rdi + 0x420]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [r15 + rbx*2], r13w
jne 0x14001b4b0
movabs rbp, 0x7ffffffffffffffe
cmp rbx, rbp
ja 0x14001b720
mov qword [r14 + 0x18], 7
cmp rbx, 8
jae 0x14001b4fa
mov qword [r14 + 0x10], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14001f540
mov word [rbx + r14], r13w
jmp 0x14001b5a7
mov rax, rbx
or rax, 7
cmp rax, rbp
jbe 0x14001b516
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14001b548
mov rbp, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbp, rcx
lea rcx, [rbp + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14001b71a
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001b574
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001b71a
mov rcx, rax
call fcn.14001c57c
test rax, rax
je 0x14001b714
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14001b586
test rcx, rcx
je 0x14001b583
call fcn.14001c57c
mov rsi, rax
jmp 0x14001b586
mov rsi, r13
mov qword [r14], rsi
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rbp
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.14001f540
mov word [rbx + rsi], r13w
mov qword [rdi + 0x440], 0xffffffffffffffff
mov dword [rdi + 0x448], 1
mov qword [rdi + 0x450], r13
mov qword [rdi + 0x458], r13
mov esi, r13d
lea rbx, [rdi + 0x420]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x10000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x440], rax
cmp rax, 0xffffffffffffffff
jne 0x14001b6bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x14001b64f
sub eax, 0x1b
je 0x14001b62f
cmp eax, 1
jne 0x14001b697
mov dword [rdi + 0x448], 3
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b646
mov r8, qword [rbx]
lea rdx, str.In_use_another_process:__s
jmp 0x14001b683
mov edx, 0x80
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, r15
call fcn.14001bc10
mov dword [rdi + 0x448], 2
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b67c
mov r8, qword [rbx]
lea rdx, str.No_permission:__s
mov rcx, rdi
call fcn.140004400
inc esi
cmp esi, 2
jge 0x14001b6db
jmp 0x14001b5e0
cmp qword [rbx + 0x18], 8
jb 0x14001b6a1
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, str.Cant_open:__s
mov rcx, rdi
call fcn.140004400
mov dword [rdi + 0x448], 1
jmp 0x14001b6db
mov dword [rdi + 0x448], r13d
mov byte [rdi + 8], 1
xor edx, edx
mov r8d, 0x410
lea rcx, [rdi + 0xa]
call fcn.14001f140
cmp dword [rdi + 0x448], 0
jne 0x14001b6f9
lea rdx, [rdi + 0x450]
mov rcx, qword [rdi + 0x440]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop
mov rax, rdi
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400261d0
int3
call fcn.140004354
int3
call fcn.1400043ec
int3