Function at 0x14001b130
Capabilities:
Get file size
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov byte [rcx + 8], 1
xor r13d, r13d
mov dword [rcx + 0x41c], r13d
mov byte [rcx + 8], 1
xor edx, edx
mov r8d, 0x410
add rcx, 0xa
call fcn.14001ee30
lea rax, vtable.FileWrapper.0
mov qword [rdi], rax
lea r14, [rdi + 0x420]
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [r15 + rbx*2], r13w
jne 0x14001b1a0
movabs rbp, 0x7ffffffffffffffe
cmp rbx, rbp
ja 0x14001b410
mov qword [r14 + 0x18], 7
cmp rbx, 8
jae 0x14001b1ea
mov qword [r14 + 0x10], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14001f230
mov word [rbx + r14], r13w
jmp 0x14001b297
mov rax, rbx
or rax, 7
cmp rax, rbp
jbe 0x14001b206
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14001b238
mov rbp, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbp, rcx
lea rcx, [rbp + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14001b40a
add rcx, rcx
cmp rcx, 0x1000
jb 0x14001b264
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001b40a
mov rcx, rax
call fcn.14001c26c
test rax, rax
je 0x14001b404
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14001b276
test rcx, rcx
je 0x14001b273
call fcn.14001c26c
mov rsi, rax
jmp 0x14001b276
mov rsi, r13
mov qword [r14], rsi
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], rbp
add rbx, rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.14001f230
mov word [rbx + rsi], r13w
mov qword [rdi + 0x440], 0xffffffffffffffff
mov dword [rdi + 0x448], 1
mov qword [rdi + 0x450], r13
mov qword [rdi + 0x458], r13
mov esi, r13d
lea rbx, [rdi + 0x420]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x10000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x440], rax
cmp rax, 0xffffffffffffffff
jne 0x14001b3af
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x14001b33f
sub eax, 0x1b
je 0x14001b31f
cmp eax, 1
jne 0x14001b387
mov dword [rdi + 0x448], 3
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b336
mov r8, qword [rbx]
lea rdx, str.In_use_another_process:__s
jmp 0x14001b373
mov edx, 0x80
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov rcx, r15
call fcn.14001b900
mov dword [rdi + 0x448], 2
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14001b36c
mov r8, qword [rbx]
lea rdx, str.No_permission:__s
mov rcx, rdi
call fcn.140004214
inc esi
cmp esi, 2
jge 0x14001b3cb
jmp 0x14001b2d0
cmp qword [rbx + 0x18], 8
jb 0x14001b391
mov rbx, qword [rbx]
mov r8, rbx
lea rdx, str.Cant_open:__s
mov rcx, rdi
call fcn.140004214
mov dword [rdi + 0x448], 1
jmp 0x14001b3cb
mov dword [rdi + 0x448], r13d
mov byte [rdi + 8], 1
xor edx, edx
mov r8d, 0x410
lea rcx, [rdi + 0xa]
call fcn.14001ee30
cmp dword [rdi + 0x448], 0
jne 0x14001b3e9
lea rdx, [rdi + 0x450]
mov rcx, qword [rdi + 0x440]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop
mov rax, rdi
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140025ec0
int3
call fcn.140004168
int3
call fcn.140004200
int3