Function at 0x140019e10
Capabilities:
Acquire credentials from windows credential manager
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
mov eax, 0x23a0
call fcn.14001d460
sub rsp, rax
or qword [rsp + 0x19a0], 0xffffffffffffffff
and word [rsp + 0x19a8], 0
and word [rsp + 0x2110], 0
and word [rsp + 0x1e88], 0
mov rsi, rdx
mov rbx, rcx
lea rax, [rsp + 0x19a8]
mov r8, rdx
lea rcx, [rsp + 0x19a0]
lea rdx, str..vcrd
mov qword [rsp + 0x1c30], rax
call fcn.140011450
lea rcx, [rsp + 0x19a0]
call fcn.140011370
test eax, eax
je 0x14001a0a2
and word [rsp + 0x390], 0
lea rcx, [rsp + 0x392]
xor edx, edx
mov r8d, 0x208
mov dword [rbx + 0x444], 1
call sub.msvcrt.dll_memset
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
add rcx, 0xb
cmp rcx, 0x104
jae 0x140019eeb
lea r8, [rsp + 0x390]
lea rdx, str.Policy.vpol
mov rcx, rsi
call fcn.140013c5c
jmp 0x140019ef3
and word [rsp + 0x390], ax
lea rcx, [rsp + 0x390]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001a0a2
lea rcx, [rsp + 0x20]
mov dword [rbx + 0x440], 1
call fcn.14001c828
mov rcx, qword [0x140025e08]
lea rdx, [rsp + 0x70]
add rcx, 0x20
call fcn.140019cb0
mov rax, qword [0x140025e08]
cmp dword [rax + 0x1c], 3
jne 0x140019f60
lea rcx, [rbx + 0x420]
call fcn.1400104e4
mov edx, dword [rbx + 0x428]
mov rax, qword [0x140025e08]
mov dword [rsp + 0x2ec], edx
cmp dword [rax + 0x1c], 1
je 0x140019f71
cmp dword [rax + 0x1c], 3
je 0x140019f71
xor r8d, r8d
jmp 0x140019f77
mov r8d, 1
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x20]
call fcn.14001ce78
mov rcx, qword [0x140025e08]
cmp dword [rcx + 0x1c], 3
mov edi, eax
jne 0x140019faa
mov edx, dword [rbx + 0x428]
lea rcx, [rbx + 0x420]
call fcn.140010664
test edi, edi
je 0x14001a057
or qword [rsp + 0x5a0], 0xffffffffffffffff
and word [rsp + 0x5a8], 0
and word [rsp + 0xd10], 0
and word [rsp + 0xa88], 0
lea rax, [rsp + 0x5a8]
lea rdx, str..vcrd
lea rcx, [rsp + 0x5a0]
mov r8, rsi
mov qword [rsp + 0x830], rax
call fcn.140011450
jmp 0x14001a037
lea rdx, [rsp + 0xa88]
lea rcx, [rsp + 0x20]
call fcn.14001c928
test eax, eax
je 0x14001a037
lea r8, [rsp + 0xa88]
lea rdx, [rsp + 0x2f0]
mov rcx, rbx
mov dword [rbx + 0x448], 1
call fcn.140018c20
lea rcx, [rsp + 0x5a0]
call fcn.140011370
test eax, eax
jne 0x140019fff
lea rcx, [rsp + 0x5a0]
call fcn.140010cd0
jmp 0x14001a098
mov eax, dword [rsp + 0x2e8]
cmp eax, 0xffffffeb
mov dword [rbx + 0x42c], eax
jne 0x14001a098
mov edx, dword [rsp + 0x388]
lea rcx, [rbx + 0x430]
call fcn.140010b70
movsxd r8, dword [rsp + 0x388]
mov rdx, qword [rsp + 0x380]
mov rcx, qword [rbx + 0x430]
call sub.msvcrt.dll_memcpy
lea rcx, [rsp + 0x20]
call fcn.14001c7e8
or qword [rsp + 0xfa0], 0xffffffffffffffff
and word [rsp + 0xfa8], 0
and word [rsp + 0x1710], 0
and word [rsp + 0x1488], 0
lea rax, [rsp + 0xfa8]
lea rdx, [0x14001e9e8]
lea rcx, [rsp + 0xfa0]
mov r8, rsi
mov qword [rsp + 0x1230], rax
call fcn.140011450
jmp 0x14001a108
call fcn.140011050
test eax, eax
je 0x14001a108
lea rdx, [rsp + 0x1488]
mov rcx, rbx
call fcn.140019e10
lea rcx, [rsp + 0xfa0]
call fcn.140011370
lea rcx, [rsp + 0xfa0]
test eax, eax
jne 0x14001a0ef
call fcn.140010cd0
lea rcx, [rsp + 0x19a0]
call fcn.140010cd0
lea r11, [rsp + 0x23a0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret