Function at 0x14001b120
Capabilities:
Get file size
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rcx + 8], 1
xor r13d, r13d
mov dword [rcx + 0x41c], r13d
mov byte [rcx + 8], 1
xor edx, edx
mov r8d, 0x410
add rcx, 0xa
call fcn.14001f2b0
lea rax, vtable.FileWrapper.0
mov qword [rdi], rax
lea r14, [rdi + 0x420]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [r15 + rbx*2], r13w
jne 0x14001b190
movabs rbp, 0x7ffffffffffffffe
cmp rbx, rbp
ja 0x14001b400
mov qword [r14 + 0x18], 7
cmp rbx, 8
jae 0x14001b1da
mov qword [r14 + 0x10], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14001f6b0
mov word [rbx + r14], r13w
jmp 0x14001b287
mov rax, rbx
or rax, 7
cmp rax, rbp
jbe 0x14001b1f6
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14001b228
mov rbp, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbp, rcx
lea rcx, [rbp + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14001b3fa
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001b254
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001b3fa
mov rcx, rax
call fcn.14001c6ec
test rax, rax
je 0x14001b3f4
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14001b266
test rcx, rcx
je 0x14001b263
call fcn.14001c6ec
mov rsi, rax
jmp 0x14001b266
mov rsi, r13
mov qword [r14], rsi
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rbp
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.14001f6b0
mov word [rbx + rsi], r13w
mov qword [rdi + 0x440], 0xffffffffffffffff
mov dword [rdi + 0x448], 1
mov qword [rdi + 0x450], r13
mov qword [rdi + 0x458], r13
mov esi, r13d
lea rbx, [rdi + 0x420]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x440], rax
cmp rax, 0xffffffffffffffff
jne 0x14001b39f
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x14001b32f
sub eax, 0x1b
je 0x14001b30f
cmp eax, 1
jne 0x14001b377
mov dword [rdi + 0x448], 3
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b326
mov r8, qword [rbx]
lea rdx, str.In_use_another_process:__s
jmp 0x14001b363
mov edx, 0x80
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, r15
call fcn.14001b8f0
mov dword [rdi + 0x448], 2
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b35c
mov r8, qword [rbx]
lea rdx, str.No_permission:__s
mov rcx, rdi
call fcn.140004214
inc esi
cmp esi, 2
jge 0x14001b3bb
jmp 0x14001b2c0
cmp qword [rbx + 0x18], 8
jb 0x14001b381
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, str.Cant_open:__s
mov rcx, rdi
call fcn.140004214
mov dword [rdi + 0x448], 1
jmp 0x14001b3bb
mov dword [rdi + 0x448], r13d
mov byte [rdi + 8], 1
xor edx, edx
mov r8d, 0x410
lea rcx, [rdi + 0xa]
call fcn.14001f2b0
cmp dword [rdi + 0x448], 0
jne 0x14001b3d9
lea rdx, [rdi + 0x450]
mov rcx, qword [rdi + 0x440]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop
mov rax, rdi
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140026340
int3
call fcn.140004168
int3
call fcn.140004200
int3