Function at 0x140151a40
Capabilities:
Check if file exists
Get disk information

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x1130
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x10f0], 0xfffffffffffffffe
mov rax, qword [0x1402a15c0]
xor rax, rsp
mov qword [rsp + 0x1120], rax
mov rcx, qword [rsp + 0x1140]
call fcn.1400f4cc0
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x40], eax
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x44], 0x43
jmp 0x140151a9f
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x140151dfe
movsx ecx, byte [rsp + 0x44]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x40]
and eax, ecx
test eax, eax
jne 0x140151aca
jmp 0x140151a94
lea rcx, [rsp + 0x888]
call fcn.140002db0
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x140236e04]
lea rcx, [rsp + 0x888]
call fcn.140002c40
lea r8, [0x140235a14]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10d0]
call fcn.1400010b0
mov qword [rsp + 0x10f8], rax
mov rcx, qword [rsp + 0x10f8]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x140151b3e
mov dword [rsp + 0x1100], 1
jmp 0x140151b49
mov dword [rsp + 0x1100], 0
movzx eax, byte [rsp + 0x1100]
mov byte [rsp + 0x10c8], al
lea rcx, [rsp + 0x10d0]
call fcn.140001490
movzx edx, byte [rsp + 0x10c8]
test edx, edx
je 0x140151b83
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140151a94
lea r8, [0x140236e0c]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e0]
call fcn.1400010b0
mov qword [rsp + 0x1108], rax
mov rcx, qword [rsp + 0x1108]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140151bce
mov dword [rsp + 0x1110], 1
jmp 0x140151bd9
mov dword [rsp + 0x1110], 0
movzx eax, byte [rsp + 0x1110]
mov byte [rsp + 0x10d8], al
lea rcx, [rsp + 0x10e0]
call fcn.140001490
movzx edx, byte [rsp + 0x10d8]
test edx, edx
je 0x140151c13
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140151a94
xor eax, eax
mov word [rsp + 0x8a0], ax
lea rdi, [rsp + 0x8a2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x140236e14]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e8]
call fcn.1400010b0
mov qword [rsp + 0x1118], rax
mov rcx, qword [rsp + 0x1118]
call fcn.140023510
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x894]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x880]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x870]
mov r8d, 0x400
lea rdx, [rsp + 0x8a0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea rcx, [rsp + 0x10e8]
call fcn.140001490
mov dword [rsp + 0x890], 0
mov dword [rsp + 0x10b0], 0
jmp 0x140151ce0
mov eax, dword [rsp + 0x10b0]
add eax, 1
mov dword [rsp + 0x10b0], eax
movsxd rdi, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.140014cc0
cmp rdi, rax
jge 0x140151d4b
lea rcx, [rsp + 0x888]
call fcn.140023510
mov rdi, rax
movsxd rdx, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.14004ff30
mov rdx, rdi
mov rcx, rax
call fcn.1400060b0
test eax, eax
jne 0x140151d49
mov dword [rsp + 0x890], 1
jmp 0x140151d4b
jmp 0x140151ccf
cmp dword [rsp + 0x890], 0
je 0x140151d67
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140151a94
lea rcx, [rsp + 0x878]
call fcn.140002db0
nop
movsx r8d, byte [rsp + 0x44]
lea r9, [rsp + 0x8a0]
lea rdx, str.__c:___s
lea rcx, [rsp + 0x878]
call fcn.140002c40
lea rcx, [rsp + 0x878]
call fcn.140023510
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov rdx, rax
call fcn.140016df0
mov dword [rsp + 0x48], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov edx, dword [rsp + 0x48]
call fcn.140016e50
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140151a94
mov byte [rsp + 0x44], 0x44
jmp 0x140151e10
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x140151f55
lea rcx, [rsp + 0x10b8]
call fcn.140002db0
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x140236e34]
lea rcx, [rsp + 0x10b8]
call fcn.140002c40
mov dword [rsp + 0x10c0], 0
mov dword [rsp + 0x10c4], 0
jmp 0x140151e6f
mov eax, dword [rsp + 0x10c4]
add eax, 1
mov dword [rsp + 0x10c4], eax
movsxd rdi, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.140014cc0
cmp rdi, rax
jge 0x140151eda
lea rcx, [rsp + 0x10b8]
call fcn.140023510
mov rdi, rax
movsxd rdx, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.14004ff30
mov rdx, rdi
mov rcx, rax
call fcn.1400060b0
test eax, eax
jne 0x140151ed8
mov dword [rsp + 0x10c0], 1
jmp 0x140151eda
jmp 0x140151e5e
cmp dword [rsp + 0x10c0], 0
je 0x140151ef6
lea rcx, [rsp + 0x10b8]
call fcn.140001490
jmp 0x140151e05
lea rcx, [rsp + 0x10b8]
call fcn.140023510
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov rdx, rax
call fcn.140016df0
mov dword [rsp + 0x10b4], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov edx, dword [rsp + 0x10b4]
call fcn.140016e50
nop
lea rcx, [rsp + 0x10b8]
call fcn.140001490
jmp 0x140151e05
mov eax, 1
mov rcx, qword [rsp + 0x1120]
xor rcx, rsp
call fcn.1400a8050
add rsp, 0x1130
pop rdi
ret