Function at 0x140151970
Capabilities:
Check if file exists
Get disk information

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x1130
call fcn.1401d5c30
sub rsp, rax
mov qword [rsp + 0x10f0], 0xfffffffffffffffe
mov rax, qword [0x1402a25c0]
xor rax, rsp
mov qword [rsp + 0x1120], rax
mov rcx, qword [rsp + 0x1140]
call fcn.1400f4c50
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x40], eax
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x44], 0x43
jmp 0x1401519cf
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x140151d2e
movsx ecx, byte [rsp + 0x44]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x40]
and eax, ecx
test eax, eax
jne 0x1401519fa
jmp 0x1401519c4
lea rcx, [rsp + 0x888]
call fcn.140002d50
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x140237e04]
lea rcx, [rsp + 0x888]
call fcn.140002be0
lea r8, [0x140236a14]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10d0]
call fcn.1400010b0
mov qword [rsp + 0x10f8], rax
mov rcx, qword [rsp + 0x10f8]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x140151a6e
mov dword [rsp + 0x1100], 1
jmp 0x140151a79
mov dword [rsp + 0x1100], 0
movzx eax, byte [rsp + 0x1100]
mov byte [rsp + 0x10c8], al
lea rcx, [rsp + 0x10d0]
call fcn.140001470
movzx edx, byte [rsp + 0x10c8]
test edx, edx
je 0x140151ab3
lea rcx, [rsp + 0x888]
call fcn.140001470
jmp 0x1401519c4
lea r8, [0x140237e0c]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e0]
call fcn.1400010b0
mov qword [rsp + 0x1108], rax
mov rcx, qword [rsp + 0x1108]
call fcn.1400012c0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140151afe
mov dword [rsp + 0x1110], 1
jmp 0x140151b09
mov dword [rsp + 0x1110], 0
movzx eax, byte [rsp + 0x1110]
mov byte [rsp + 0x10d8], al
lea rcx, [rsp + 0x10e0]
call fcn.140001470
movzx edx, byte [rsp + 0x10d8]
test edx, edx
je 0x140151b43
lea rcx, [rsp + 0x888]
call fcn.140001470
jmp 0x1401519c4
xor eax, eax
mov word [rsp + 0x8a0], ax
lea rdi, [rsp + 0x8a2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x140237e14]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e8]
call fcn.1400010b0
mov qword [rsp + 0x1118], rax
mov rcx, qword [rsp + 0x1118]
call fcn.1400012c0
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x894]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x880]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x870]
mov r8d, 0x400
lea rdx, [rsp + 0x8a0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea rcx, [rsp + 0x10e8]
call fcn.140001470
mov dword [rsp + 0x890], 0
mov dword [rsp + 0x10b0], 0
jmp 0x140151c10
mov eax, dword [rsp + 0x10b0]
add eax, 1
mov dword [rsp + 0x10b0], eax
movsxd rdi, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.14000f920
cmp rdi, rax
jge 0x140151c7b
lea rcx, [rsp + 0x888]
call fcn.1400012c0
mov rdi, rax
movsxd rdx, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.140021970
mov rdx, rdi
mov rcx, rax
call fcn.140006050
test eax, eax
jne 0x140151c79
mov dword [rsp + 0x890], 1
jmp 0x140151c7b
jmp 0x140151bff
cmp dword [rsp + 0x890], 0
je 0x140151c97
lea rcx, [rsp + 0x888]
call fcn.140001470
jmp 0x1401519c4
lea rcx, [rsp + 0x878]
call fcn.140002d50
nop
movsx r8d, byte [rsp + 0x44]
lea r9, [rsp + 0x8a0]
lea rdx, str.__c:___s
lea rcx, [rsp + 0x878]
call fcn.140002be0
lea rcx, [rsp + 0x878]
call fcn.1400012c0
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov rdx, rax
call fcn.140017890
mov dword [rsp + 0x48], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov edx, dword [rsp + 0x48]
call fcn.1400178f0
nop
lea rcx, [rsp + 0x878]
call fcn.140001470
nop
lea rcx, [rsp + 0x888]
call fcn.140001470
jmp 0x1401519c4
mov byte [rsp + 0x44], 0x44
jmp 0x140151d40
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x140151e85
lea rcx, [rsp + 0x10b8]
call fcn.140002d50
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x140237e34]
lea rcx, [rsp + 0x10b8]
call fcn.140002be0
mov dword [rsp + 0x10c0], 0
mov dword [rsp + 0x10c4], 0
jmp 0x140151d9f
mov eax, dword [rsp + 0x10c4]
add eax, 1
mov dword [rsp + 0x10c4], eax
movsxd rdi, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.14000f920
cmp rdi, rax
jge 0x140151e0a
lea rcx, [rsp + 0x10b8]
call fcn.1400012c0
mov rdi, rax
movsxd rdx, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.140021970
mov rdx, rdi
mov rcx, rax
call fcn.140006050
test eax, eax
jne 0x140151e08
mov dword [rsp + 0x10c0], 1
jmp 0x140151e0a
jmp 0x140151d8e
cmp dword [rsp + 0x10c0], 0
je 0x140151e26
lea rcx, [rsp + 0x10b8]
call fcn.140001470
jmp 0x140151d35
lea rcx, [rsp + 0x10b8]
call fcn.1400012c0
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov rdx, rax
call fcn.140017890
mov dword [rsp + 0x10b4], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov edx, dword [rsp + 0x10b4]
call fcn.1400178f0
nop
lea rcx, [rsp + 0x10b8]
call fcn.140001470
jmp 0x140151d35
mov eax, 1
mov rcx, qword [rsp + 0x1120]
xor rcx, rsp
call fcn.1400a8040
add rsp, 0x1130
pop rdi
ret