Function at 0x140159210
Capabilities:
Check if file exists
Get disk information

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x1130
call fcn.1401da720
sub rsp, rax
mov qword [rsp + 0x10f0], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x1120], rax
mov rcx, qword [rsp + 0x1140]
call fcn.1400f4fe0
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x40], eax
mov byte [rsp + 0x44], 0
mov byte [rsp + 0x44], 0x43
jmp 0x14015926f
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x1401595ce
movsx ecx, byte [rsp + 0x44]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x40]
and eax, ecx
test eax, eax
jne 0x14015929a
jmp 0x140159264
lea rcx, [rsp + 0x888]
call fcn.140002de0
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x14023cdd4]
lea rcx, [rsp + 0x888]
call fcn.140002c70
lea r8, [0x14023bffc]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10d0]
call fcn.1400010b0
mov qword [rsp + 0x10f8], rax
mov rcx, qword [rsp + 0x10f8]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x14015930e
mov dword [rsp + 0x1100], 1
jmp 0x140159319
mov dword [rsp + 0x1100], 0
movzx eax, byte [rsp + 0x1100]
mov byte [rsp + 0x10c8], al
lea rcx, [rsp + 0x10d0]
call fcn.140001490
movzx edx, byte [rsp + 0x10c8]
test edx, edx
je 0x140159353
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140159264
lea r8, [0x14023cddc]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e0]
call fcn.1400010b0
mov qword [rsp + 0x1108], rax
mov rcx, qword [rsp + 0x1108]
call fcn.14000f8f0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14015939e
mov dword [rsp + 0x1110], 1
jmp 0x1401593a9
mov dword [rsp + 0x1110], 0
movzx eax, byte [rsp + 0x1110]
mov byte [rsp + 0x10d8], al
lea rcx, [rsp + 0x10e0]
call fcn.140001490
movzx edx, byte [rsp + 0x10d8]
test edx, edx
je 0x1401593e3
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140159264
xor eax, eax
mov word [rsp + 0x8a0], ax
lea rdi, [rsp + 0x8a2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x14023cde4]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x10e8]
call fcn.1400010b0
mov qword [rsp + 0x1118], rax
mov rcx, qword [rsp + 0x1118]
call fcn.14000f8f0
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x894]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x880]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x870]
mov r8d, 0x400
lea rdx, [rsp + 0x8a0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea rcx, [rsp + 0x10e8]
call fcn.140001490
mov dword [rsp + 0x890], 0
mov dword [rsp + 0x10b0], 0
jmp 0x1401594b0
mov eax, dword [rsp + 0x10b0]
add eax, 1
mov dword [rsp + 0x10b0], eax
movsxd rdi, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.140012e60
cmp rdi, rax
jge 0x14015951b
lea rcx, [rsp + 0x888]
call fcn.14000f8f0
mov rdi, rax
movsxd rdx, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x210
call fcn.14001edf0
mov rdx, rdi
mov rcx, rax
call fcn.140006180
test eax, eax
jne 0x140159519
mov dword [rsp + 0x890], 1
jmp 0x14015951b
jmp 0x14015949f
cmp dword [rsp + 0x890], 0
je 0x140159537
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140159264
lea rcx, [rsp + 0x878]
call fcn.140002de0
nop
movsx r8d, byte [rsp + 0x44]
lea r9, [rsp + 0x8a0]
lea rdx, str.__c:___s
lea rcx, [rsp + 0x878]
call fcn.140002c70
lea rcx, [rsp + 0x878]
call fcn.14000f8f0
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov rdx, rax
call fcn.140014fc0
mov dword [rsp + 0x48], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x260
mov edx, dword [rsp + 0x48]
call fcn.140015020
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
jmp 0x140159264
mov byte [rsp + 0x44], 0x44
jmp 0x1401595e0
movzx eax, byte [rsp + 0x44]
add al, 1
mov byte [rsp + 0x44], al
movsx eax, byte [rsp + 0x44]
cmp eax, 0x5a
jg 0x140159725
lea rcx, [rsp + 0x10b8]
call fcn.140002de0
nop
movsx r8d, byte [rsp + 0x44]
lea rdx, [0x14023ce04]
lea rcx, [rsp + 0x10b8]
call fcn.140002c70
mov dword [rsp + 0x10c0], 0
mov dword [rsp + 0x10c4], 0
jmp 0x14015963f
mov eax, dword [rsp + 0x10c4]
add eax, 1
mov dword [rsp + 0x10c4], eax
movsxd rdi, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.140012e60
cmp rdi, rax
jge 0x1401596aa
lea rcx, [rsp + 0x10b8]
call fcn.14000f8f0
mov rdi, rax
movsxd rdx, dword [rsp + 0x10c4]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x238
call fcn.14001edf0
mov rdx, rdi
mov rcx, rax
call fcn.140006180
test eax, eax
jne 0x1401596a8
mov dword [rsp + 0x10c0], 1
jmp 0x1401596aa
jmp 0x14015962e
cmp dword [rsp + 0x10c0], 0
je 0x1401596c6
lea rcx, [rsp + 0x10b8]
call fcn.140001490
jmp 0x1401595d5
lea rcx, [rsp + 0x10b8]
call fcn.14000f8f0
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov rdx, rax
call fcn.140014fc0
mov dword [rsp + 0x10b4], eax
movsx r8, byte [rsp + 0x44]
mov rcx, qword [rsp + 0x1140]
add rcx, 0x310
mov edx, dword [rsp + 0x10b4]
call fcn.140015020
nop
lea rcx, [rsp + 0x10b8]
call fcn.140001490
jmp 0x1401595d5
mov eax, 1
mov rcx, qword [rsp + 0x1120]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x1130
pop rdi
ret