Function at 0x18001338c
Capabilities:
Check if file exists
Get disk information
Get file attributes

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0xf0
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rax, qword [0x1800824d0]
xor rax, rsp
mov qword [rsp + 0xe8], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetTickCount64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor ebp, ebp
cmp rax, rbp
je 0x1800133ec
call rax
mov r11, rax
jmp 0x1800133f5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r11d, eax
mov rax, r11
sub rax, qword [0x180087278]
cmp rax, 0xbb8
jb 0x1800136b4
mov qword [0x180087278], r11
lea rcx, str.swvv
call fcn.180021f04
cmp eax, ebp
je 0x1800136b4
lea rcx, [rsp + 0x88]
call fcn.18003e870
nop
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov qword [rsp + 0xe0], 0xf
mov qword [rsp + 0xd8], rbp
mov byte [rsp + 0xc8], bpl
mov rsi, qword [rsp + 0xb0]
mov rax, qword [rsi]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x20], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
mov rdi, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
cmp rdi, rbp
je 0x180013492
cmp rdi, rax
je 0x180013497
call fcn.180043018
cmp rbx, rsi
je 0x1800135be
cmp rdi, rbp
jne 0x1800134af
call fcn.180043018
mov r11, rbp
jmp 0x1800134b2
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x1800134bd
call fcn.180043018
cmp rdi, rbp
jne 0x1800134cc
call fcn.180043018
mov r11, rbp
jmp 0x1800134cf
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x1800134da
call fcn.180043018
cmp qword [rbx + 0x38], 0x10
jb 0x1800134e7
mov rcx, qword [rbx + 0x20]
jmp 0x1800134eb
lea rcx, [rbx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x180013589
cmp rdi, rbp
jne 0x180013509
call fcn.180043018
mov r11, rbp
jmp 0x18001350c
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x180013517
call fcn.180043018
cmp rdi, rbp
jne 0x180013526
call fcn.180043018
mov r11, rbp
jmp 0x180013529
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x180013534
call fcn.180043018
cmp qword [rbx + 0x38], 0x10
jb 0x180013541
mov rdx, qword [rbx + 0x20]
jmp 0x180013545
lea rdx, [rbx + 0x20]
movsx r8d, byte [rbx + 0x10]
lea rcx, [0x180068e00]
call fcn.18001e148
cmp rdi, rbp
jne 0x180013565
call fcn.180043018
mov r11, rbp
jmp 0x180013568
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x180013573
call fcn.180043018
mov r8b, byte [rbx + 0x10]
mov edx, 1
lea rcx, [rsp + 0xc0]
call fcn.180017c08
cmp rdi, rbp
jne 0x180013598
call fcn.180043018
mov r11, rbp
jmp 0x18001359b
mov r11, qword [rdi]
cmp rbx, qword [r11 + 0x28]
jne 0x1800135a6
call fcn.180043018
mov rbx, qword [rbx]
mov rsi, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x88]
jmp 0x180013488
cmp qword [rsp + 0xd8], rbp
je 0x180013673
and dword [rsp + 0x60], 0xfffffe00
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x78], rbp
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x30]
call fcn.18002b148
mov rbx, rax
lea rdx, str.letters
lea rcx, [rsp + 0x58]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rbx
call fcn.18002b3d4
mov r8d, 7
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], rbp
mov word [rsp + 0x38], bp
lea rdx, str.unmount
lea rcx, [rsp + 0x30]
call fcn.18000297c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.180012520
nop
cmp qword [rsp + 0x50], 8
jb 0x180013668
mov rcx, qword [rsp + 0x38]
call fcn.180043070
nop
lea rcx, [rsp + 0x58]
call fcn.18002b33c
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x18001368b
mov rcx, qword [rsp + 0xc8]
call fcn.180043070
mov qword [rsp + 0xe0], 0xf
mov qword [rsp + 0xd8], rbp
mov byte [rsp + 0xc8], bpl
lea rcx, [rsp + 0x88]
call fcn.180017930
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.180042bb0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret