Function at 0x1400a47e0
Capabilities:
Check if file exists
Delete file
Get file attributes

Disassembly:
push rbx
push rbp
push r12
push r13
sub rsp, 0x6e8
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x6b0], rax
mov rax, qword [rsp + 0x738]
mov r13, rcx
mov rbp, r8
mov r12, rdx
lea rcx, [rsp + 0x4a2]
mov r8d, 0x206
xor edx, edx
mov qword [rsp + 0x50], rax
mov ebx, r9d
mov word [rsp + Ordinal_1193], 0
call sub.ntdll.dll_memset
lea rcx, [rsp + 0xa2]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0xa0], 0
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x4a0]
mov r8d, 0x208
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x4a0]
mov dx, 0x5c
call qword [sym.imp.ntdll.dll_wcsrchr]
lea r8, [rsp + 0x4a0]
lea rdx, str._sexnosys.txt
lea rcx, [rsp + 0xa0]
mov word [rax], 0
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400a48bb
xor eax, eax
jmp 0x1400a5111
mov qword [rsp + Ordinal_1762], rsi
mov ecx, ebx
mov qword [rsp + Ordinal_1754], rdi
mov qword [rsp + Ordinal_1750], r14
call fcn.140119fd0
mov r8, rbp
mov r14d, eax
mov rdx, r12
mov rcx, r13
mov dword [rsp + 0x40], r14d
call fcn.1400c4380
call fcn.140049400
mov rdi, qword [rax]
mov r8, qword [rsp + 0x730]
mov r9d, 0xc0000000
mov edx, ebx
mov rcx, rax
call qword [rdi + 0xc0]
cmp rax, 0xffffffffffffffff
mov qword [rsp + 0x88], rax
jne 0x1400a496c
call fcn.140049470
mov rbx, rax
mov rsi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str...optcore.cpp
mov edx, 0x537
mov edi, eax
call fcn.1400a0fc0
lea rdx, str._s:_Get_volume_handle_failed__Last_Error:__d.
mov r9d, edi
mov r8, rax
mov rcx, rbx
call qword [rsi + 0x10]
mov rax, qword [rbp]
mov edx, 0x24
mov rcx, rbp
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400a50f9
mov rcx, qword [r13 + reloc.MFC80U.DLL_Ordinal_1112]
mov rdx, qword [r12 + 8]
mov qword [rsp + 0x6c8], r15
mov rax, qword [rcx]
call qword [rax + 0x48]
mov r8, qword [r12 + 0x18]
mov edx, dword [r12 + 0x10]
mov rcx, rax
call fcn.1400bcd20
mov r8, qword [r12 + 0x20]
mov edx, dword [r12 + 0x10]
mov rcx, qword [r12 + 8]
mov rbx, rax
call fcn.1400bcd20
mov edx, dword [r12 + 0x10]
mov rcx, qword [r12 + 8]
mov rdi, rax
call fcn.1400bcc40
mov rcx, qword [r13 + reloc.MFC80U.DLL_Ordinal_1112]
mov rdx, qword [r12 + 8]
mov rsi, rax
mov rax, qword [rcx]
call qword [rax + 0x48]
mov edx, dword [r12 + 0x10]
mov rcx, rax
call fcn.1400bcc40
mov rax, qword [rbp]
mov edx, 0x64
mov rcx, rbp
call qword [rax + 0x50]
mov rax, qword [rdi]
mov rcx, rdi
mov dword [rsp + 0x44], 0
call qword [rax + 0x38]
mov rdx, qword [rdi]
mov rcx, rdi
mov r12, rax
call qword [rdx + 0x88]
mov rdx, qword [rbx]
mov rcx, rbx
mov r13, rax
call qword [rdx + 0x88]
mov rdx, qword [rdi]
mov rcx, rdi
mov r15, rax
call qword [rdx + 0x40]
mov rcx, rsi
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x50]
mov qword [rax], r13
mov rdx, qword [rsi]
call qword [rdx + 0x40]
mov ecx, 0x10028
mov rbx, rax
call sub.MFC80U.DLL_Ordinal_265
xor edx, edx
mov rcx, rax
mov r8d, 0x10028
mov rsi, rax
call sub.ntdll.dll_memset
xor edi, edi
mov rcx, rbx
mov dword [rsp + 0x60], edi
mov rdx, qword [rbx]
call qword [rdx + 0x80]
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov rcx, rax
lea rax, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov edx, 0x7400c
mov dword [rsp + 0x28], 0x10028
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a4af3
call fcn.140049470
lea rcx, str...optcore.cpp
mov edx, Ordinal_1369
mov rbx, qword [rax]
mov rdi, rax
call fcn.1400a0fc0
lea rdx, str._s:_Failed_to_get_drive_layout.
mov rcx, rdi
mov r8, rax
call qword [rbx + 0x10]
mov rax, qword [rbp]
mov edx, 0x24
mov rcx, rbp
call qword [rax + 0x40]
mov rcx, rsi
call sub.MFC80U.DLL_Ordinal_266
xor eax, eax
jmp 0x1400a50f1
mov r8d, dword [rsi]
test r8d, r8d
je 0x1400a4b30
mov r9, r14
lea rcx, [rsi + 8]
mov rax, qword [rcx]
cqo
idiv r9
cmp rax, r12
je 0x1400a4b1d
add edi, 1
add rcx, 0x20
cmp edi, r8d
jb 0x1400a4b02
jmp 0x1400a4b30
mov eax, dword [rcx + 0x14]
mov dword [rsp + 0x44], eax
mov rax, qword [rcx + 8]
cqo
idiv r9
mov r15, rax
mov rcx, rsi
call sub.MFC80U.DLL_Ordinal_266
mov rax, qword [rbp]
mov edx, 0x14
mov rcx, rbp
call qword [rax + 0x10]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xa8]
mov rdx, qword [rbx]
mov rcx, rbx
mov r14d, eax
call qword [rdx + 0xa0]
mov esi, dword [rsp + 0x40]
mov rcx, r13
imul r14d, eax
mov eax, 0x2000000
sub rcx, r15
cqo
mov qword [rsp + 0x90], r14
idiv rsi
cmp rcx, rax
jle 0x1400a4cdd
lea rcx, [rsp + 0xa2]
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_1022
mov word [rsp + 0xa0], 0
call sub.ntdll.dll_memset
lea rcx, [rsp + 0xa0]
mov edx, reloc.MFC80U.DLL_Ordinal_512
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xa0]
xor r9d, r9d
mov qword [rsp + 0x30], 0
repne scasw ax, word [rdi]
mov rax, qword [str.paextend.txt]
lea r8d, [r9 + 3]
mov qword [rdi - 2], rax
mov rax, qword [0x1402e3f68]
lea rcx, [rsp + 0xa0]
mov qword [rdi + 6], rax
mov rax, qword [0x1402e3f70]
mov edx, 0xc0000000
mov qword [rdi + 0xe], rax
mov eax, dword [0x1402e3f78]
mov dword [rsp + 0x28], 0x80
mov dword [rdi + 0x16], eax
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rdx, [0x1402eaf28]
mov r8d, 2
mov rcx, rax
mov rdi, rax
call fcn.1400a15a0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx ecx, word [rsp + 0xa0]
call fcn.1400a4690
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [rsp + 0x44]
mov rax, qword [rbx]
mov rdx, rsi
mov rcx, rbx
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x40], 0
imul rdx, r14
mov qword [rsp + 0x70], rdx
call qword [rax + 0x80]
xor edx, edx
mov qword [rsp + 0x38], rdx
mov rcx, rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edx
lea r9d, [rdx + 0x10]
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0x68]
mov edx, 0x7c0d0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1400a4ce1
lea rcx, [rsp + 0xa0]
sub r13, r14
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1400a4ce1
mov edi, dword [rsp + 0x44]
mov dword [rsp + 0x78], edi
mov rax, r13
xor edi, edi
sub rax, r15
mov dword [rsp + 0x48], edi
mov rcx, rbx
imul rax, rsi
mov qword [rsp + 0x80], rax
mov rax, qword [rbx]
call qword [rax + 0x80]
mov qword [rsp + 0x38], rdi
lea r9d, [rdi + 0x10]
mov rcx, rax
lea rax, [rsp + 0x48]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x30], rax
mov edx, 0x7c0d0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a4de1
mov rax, r13
mov rcx, rbx
sub rax, r14
sub rax, r15
imul rax, rsi
mov qword [rsp + 0x80], rax
mov rax, qword [rbx]
call qword [rax + 0x80]
mov qword [rsp + 0x38], rdi
lea r9d, [rdi + 0x10]
mov rcx, rax
lea rax, [rsp + 0x48]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x30], rax
mov edx, 0x7c0d0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a4de1
call fcn.140049470
mov rbx, rax
mov rsi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str...optcore.cpp
mov edx, 0x5c9
mov edi, eax
call fcn.1400a0fc0
lea rdx, str._s:_Failed_to_grow_partition__Last_Error:__d.
mov r9d, edi
mov r8, rax
mov rcx, rbx
call qword [rsi + 0x10]
mov rax, qword [rbp]
mov edx, 0x24
mov rcx, rbp
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400a50f1
mov ecx, 0x10028
call sub.MFC80U.DLL_Ordinal_265
xor edx, edx
mov r8d, 0x10028
mov rcx, rax
mov r14, rax
call sub.ntdll.dll_memset
mov rax, qword [rbx]
mov rcx, rbx
mov dword [rsp + 0x40], edi
call qword [rax + 0x80]
mov qword [rsp + 0x38], rdi
mov rcx, rax
lea rax, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov edx, 0x7400c
mov dword [rsp + 0x28], 0x10028
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a4e8c
call fcn.140049470
lea rcx, str...optcore.cpp
mov edx, Ordinal_1498
mov rbx, qword [rax]
mov rdi, rax
call fcn.1400a0fc0
lea rdx, str._s:_Failed_to_get_drive_layout.
mov rcx, rdi
mov r8, rax
call qword [rbx + 0x10]
mov rax, qword [rbp]
mov edx, 0x24
mov rcx, rbp
call qword [rax + 0x40]
mov rcx, r14
call sub.MFC80U.DLL_Ordinal_266
xor eax, eax
jmp 0x1400a50f1
mov r8d, dword [r14]
test r8d, r8d
je 0x1400a4ec7
lea rcx, [r14 + 8]
nop
nop
mov rax, qword [rcx]
cqo
idiv rsi
cmp rax, r12
je 0x1400a4ebb
add edi, 1
add rcx, 0x20
cmp edi, r8d
jb 0x1400a4ea0
jmp 0x1400a4ec7
mov rax, qword [rcx + 8]
cqo
idiv rsi
mov r13, rax
mov rcx, r14
call sub.MFC80U.DLL_Ordinal_266
mov rax, qword [rsp + 0x50]
mov edx, 0x28
mov qword [rax], r13
lea rax, [r13 - 1]
mov rcx, rbp
mov qword [rsp + 0x58], rax
mov rax, qword [rbp]
call qword [rax + 0x10]
mov r14, qword [rsp + 0x88]
xor edi, edi
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x48]
lea r9d, [rdi + 8]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x58]
mov rcx, r14
mov edx, 0x900f0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a50d4
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x38], rdi
lea r9d, [rdi + 8]
sub qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
lea r8, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov edx, 0x900f0
mov rcx, r14
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400a50d4
call fcn.140049470
lea r12, [0x1404342a0]
xor edx, edx
mov rcx, r12
mov r8d, 0x80
mov qword [rsp + 0x50], rax
call sub.ntdll.dll_memset
lea edx, [rdi + 0x5c]
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
test rax, rax
mov rdi, rax
jne 0x1400a4fb5
xor r12d, r12d
jmp 0x1400a5040
xor eax, eax
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x90]
mov r8d, Ordinal_1532
mov byte [rsp + 0x90], 0
mov qword [rsp + 0x91], rax
mov word [rsp + 0x99], ax
mov byte [rsp + 0x9b], al
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r12
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
add rdx, 1
test al, al
mov byte [rdx + rcx - 1], al
jne 0x1400a5000
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x90]
nop
nop
nop
movzx eax, byte [rdx + rcx]
add rcx, 1
test al, al
mov byte [rdi + rcx - 2], al
jne 0x1400a5030
mov rdi, qword [rsp + 0x50]
mov rdi, qword [rdi]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x50]
lea rdx, str._s:_Failed_to_extend_file_system__Last_Error:__d.
mov r9d, eax
mov r8, r12
call qword [rdi + 0x10]
mov rax, qword [rbp]
mov edx, 0x24
mov rcx, rbp
call qword [rax + 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x44]
sub r15, r13
imul r15, rsi
mov dword [rsp + 0x68], eax
mov rax, qword [rbx]
xor edi, edi
mov rcx, rbx
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x40], edi
call qword [rax + 0x80]
mov qword [rsp + 0x38], rdi
lea r9d, [rdi + 0x10]
mov rcx, rax
lea rax, [rsp + 0x40]
lea r8, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov edx, 0x7c0d0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor eax, eax
jmp 0x1400a50f1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp]
mov edx, 0x64
mov rcx, rbp
call qword [rax + 0x10]
mov eax, 1
mov r15, qword [rsp + 0x6c8]
mov rdi, qword [rsp + 0x6d8]
mov rsi, qword [rsp + 0x6e0]
mov r14, qword [rsp + 0x6d0]
mov rcx, qword [rsp + 0x6b0]
xor rcx, rsp
call fcn.140161080
add rsp, 0x6e8
pop r13
pop r12
pop rbp
pop rbx
ret