Function at 0x14001b470
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov r14, r9
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov rax, qword [0x140196028]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
movaps xmm6, xmmword [0x14016f5d0]
lea rcx, [rsp + 0xc0]
movaps xmmword [rcx], xmm6
xor edx, edx
call fcn.1400333a0
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b76b
mov qword [rsp + 0x48], rsi
mov ebp, dword [rsp + 0x380]
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea r15, [rsp + 0x50]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bcfbc
mov r13, rax
lea rdx, [0x14001c190]
lea r8, [0x14001c1a0]
mov rcx, rax
call fcn.140086710
lea rbx, [rsp + 0x290]
mov qword [rbx], r13
mov rcx, r15
mov rdx, rbx
call fcn.140086810
lea r15, [rsp + 0xd0]
mov rcx, r15
mov edx, ebp
mov r8d, 0x40
call fcn.140114520
lea r13, [rsp + 0xc0]
mov rcx, r13
mov rdx, r15
call fcn.140033450
mov rcx, r15
call fcn.140033420
mov rcx, r13
call fcn.140082e30
test al, al
jne 0x14001b5a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001b756
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x50]
call fcn.140086840
test r15d, r15d
jns 0x14001b5ab
jmp 0x14001ba13
lea rcx, [rsp + 0x50]
call fcn.140086840
mov r15, qword [rsp + 0x370]
lea rcx, [rsp + 0xa0]
mov qword [rcx + 0x10], rsi
movaps xmmword [rcx], xmm6
call fcn.1401150c0
lea r13, [rsp + 0x270]
mov qword [r13 + 0x10], rsi
movaps xmmword [r13], xmm6
mov rcx, r13
call fcn.1401150c0
mov rcx, r13
mov rdx, r15
call fcn.1401151e0
test al, al
jne 0x14001b624
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
jne 0x14001b7bb
lea rcx, [rsp + 0x270]
call fcn.1401151b0
mov r15d, 0x80004005
jmp 0x14001ba06
lea r15, [rsp + 0x250]
mov qword [r15 + 0x10], rsi
movaps xmmword [r15], xmm6
lea rcx, [rsp + 0x270]
call fcn.1400f0560
lea rcx, str.ChromeRecoveryCRX.crx
lea r8, [rsp + 0x240]
mov qword [r8], rcx
mov qword [r8 + 8], 0x15
mov rcx, rax
mov rdx, r15
call fcn.140087ff0
lea rcx, [rsp + 0x228]
mov rdx, r12
call fcn.1400868c0
lea rcx, [rsp + 0xd0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.14003a4b0
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b788
lea r15, [rsp + 0x290]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bcfbc
mov r12, rax
lea rdx, [0x14001c190]
lea r8, [0x14001c1a0]
mov rcx, rax
call fcn.140086710
lea rdx, [rsp + 0x210]
mov qword [rdx], r12
mov rcx, r15
call fcn.140086810
lea r15, [rsp + 0xd0]
lea rdx, [rsp + 0x228]
mov rcx, r15
mov r8d, 0x80021
call fcn.14003a540
mov rcx, r15
call fcn.140082e70
test al, al
je 0x14001ba57
lea rcx, [rsp + 0xd0]
call fcn.140033fa0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov r15d, 0x80070057
cmp eax, 1
jne 0x14001b779
lea rcx, [rsp + 0xd0]
call fcn.1400340e0
dec rax
cmp rax, 0x98967e
ja 0x14001b779
lea rcx, [rsp + 0x290]
call fcn.140086840
jmp 0x14001ba8c
lea rcx, [rsp + 0x50]
call fcn.140086840
mov r15d, 0x80004005
jmp 0x14001ba13
mov r15d, eax
jmp 0x14001ba13
mov r15d, 0x80004005
lea rcx, [rsp + 0x290]
call fcn.140086840
jmp 0x14001b78b
mov r15d, eax
lea rcx, [rsp + 0xd0]
call fcn.140088df0
lea rcx, [rsp + 0x228]
call fcn.140086b20
test r15d, r15d
jns 0x14001bc5a
lea rcx, [rsp + 0x250]
call fcn.140086b20
lea rcx, [rsp + 0x270]
call fcn.1401151b0
test r15d, r15d
js 0x14001ba06
mov rdi, qword [rsp + 0x378]
lea rbx, [rsp + 0x290]
mov qword [rbx + 0x10], rsi
movaps xmmword [rbx], xmm6
lea rcx, [rsp + 0xa0]
call fcn.1400f0560
mov rcx, rax
mov rdx, rbx
mov r8, rdi
call fcn.140039ef0
lea rdi, [rsp + 0x50]
movaps xmmword [rdi + 0x40], xmm6
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
mov rdx, rbx
call fcn.14003a6a0
xor ebp, ebp
mov rcx, rdi
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
call fcn.140116bb0
lea rsi, [rsp + 0xd0]
mov r8d, 0x98
mov rcx, rsi
mov dl, 0xaa
call fcn.1400c0660
mov rcx, rsi
call fcn.140036d80
mov byte [rsi + 0x22], 1
lea rcx, [rsp + 0xd8]
call fcn.140034d80
lea rbx, [rsp + 0x270]
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140033580
mov rcx, rbx
call fcn.140082e30
test al, al
je 0x14001b925
lea rsi, [rsp + 0x250]
mov qword [rsi], 0
lea rcx, [rsp + 0xc0]
call fcn.140082e50
mov rdi, rax
lea rcx, [rsp + 0x270]
call fcn.140082e50
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0x101000
mov rcx, rax
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14001b925
mov rsi, qword [rsp + 0x250]
test rsi, rsi
je 0x14001b91e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r15d, r15d
cmp rsi, 0xffffffffffffffff
je 0x14001bf3e
call fcn.140086700
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001b945
xor esi, esi
xor r15d, r15d
jmp 0x14001b945
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
xor esi, esi
lea rcx, [rsp + 0x270]
call fcn.140033420
lea rcx, [rsp + 0xd0]
call fcn.140036df0
test r15d, r15d
js 0x14001b9d8
mov rbx, qword [rsp + 0x388]
lea rcx, [rsp + 0xa0]
lea rdi, [rsp + 0xd0]
mov rdx, rdi
call fcn.1401150d0
mov rcx, rdi
call fcn.14001bfa0
mov rcx, rdi
call fcn.140086b20
lea r14, [rsi + 1]
cmp r14, 2
jb 0x14001b9a3
call fcn.140086700
cmp qword [rbx], rsi
je 0x14001b9d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [rbx]
inc rax
cmp rax, 2
jae 0x14001bf45
cmp r14, 2
jb 0x14001b9ce
mov qword [rbx], rsi
call fcn.140086700
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14001b9ef
call fcn.140086700
mov rcx, rsi
call fcn.140082b50
lea rcx, [rsp + 0x50]
call fcn.14003ab80
lea rcx, [rsp + 0x290]
call fcn.140086b20
lea rcx, [rsp + 0xa0]
call fcn.1401151b0
lea rcx, [rsp + 0xc0]
call fcn.140033420
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1400be510
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001b773
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x290]
call fcn.140086840
test r15d, r15d
js 0x14001b78b
lea r15, [rsp + 0x290]
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, r15
call fcn.14003a4b0
lea rdx, [rsp + 0x250]
mov rcx, r15
mov r8d, 0x80048
call fcn.14003a540
mov rcx, r15
call fcn.140082e70
test al, al
jne 0x14001bafc
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
lea rcx, [rsp + 0x290]
call fcn.140088df0
jmp 0x14001b78b
mov ecx, 0x10000
call fcn.1400bcfbc
mov r12, rax
lea rdx, [rax + 0x10000]
neg rax
xor ecx, ecx
cmp rax, rcx
je 0x14001bf5e
mov byte [r12 + rcx], 0
inc rcx
cmp rcx, 0x10000
jne 0x14001bb15
mov qword [rsp + 0x40], rdx
xor r13d, r13d
lea r15, [rsp + 0xd0]
mov rcx, r15
mov rdx, r12
mov r8d, 0x10000
call fcn.140082fc0
test eax, eax
js 0x14001bb96
je 0x14001bb89
mov ebp, eax
mov eax, eax
add r13, rax
cmp r13, 0x989680
ja 0x14001bb8e
lea rcx, [rsp + 0x290]
mov rdx, r12
mov r8d, ebp
call fcn.140033fb0
test eax, eax
js 0x14001bb96
cmp eax, ebp
je 0x14001bb3f
mov r15d, 0x8000ffff
jmp 0x14001bbb4
xor r15d, r15d
jmp 0x14001bbb4
mov r15d, 0x80070057
jmp 0x14001bbb4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
test r12, r12
je 0x14001baea
mov rax, qword [rsp + 0x40]
dec rax
cmp rax, 0xffff
ja 0x14001bf23
lea rax, str.null_pointer_given_to_destroy_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__loc___nullptr
mov r8d, 0x41
call fcn.1400f3d70
mov rax, qword [rsp + 0x2c8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001bbd1
jmp 0x14001beff
js 0x14001bf8a
mov rcx, r14
call fcn.1400bcfbc
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], rax
lea r12, [rax + r14]
mov qword [rsp + 0x2d0], r12
mov rcx, rax
mov rdx, r15
mov r8, r14
call fcn.1400bffb0
mov qword [rsp + 0x2c8], r12
jmp 0x14001bc9f
xorps xmm7, xmm7
movaps xmmword [rsp + 0x290], xmm7
xor eax, eax
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0xd0], xmm7
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
mov r15, qword [r14]
mov r14, qword [r14 + 8]
sub r14, r15
jne 0x14001bc18
mov ecx, 0x18
call fcn.1400bcfbc
lea r14, [rsp + 0x228]
mov qword [r14 - 0x18], rax
mov qword [r14 - 0x10], rax
lea rcx, [rax + 0x18]
mov qword [r14 - 8], rcx
lea r8, [rsp + 0x2d8]
lea rdx, [rsp + 0x2c0]
mov rcx, r14
mov r9, rax
call fcn.1400f0ec0
mov qword [r14 - 0x10], rax
movups xmmword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x250]
lea rbx, [rsp + 0x210]
lea r9, [rsp + 0xd0]
mov rdx, rdi
mov r8, rbx
call fcn.14003eb10
mov edi, eax
mov rbx, qword [rbx]
test rbx, rbx
jne 0x14001bd82
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
jne 0x14001bbfd
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
jne 0x14001bd63
mov r15d, 0x80092009
test edi, edi
je 0x14001bde8
cmp byte [rsp + 0x2a7], 0
jns 0x14001b7ae
mov rcx, qword [rsp + 0x290]
call fcn.1400bcff8
jmp 0x14001b7ae
mov rax, qword [rsp + 0xd8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001bbd1
jmp 0x14001bf11
mov r14, qword [rsp + 0x218]
mov rcx, rbx
cmp r14, rbx
je 0x14001bdbb
add r14, 0xffffffffffffffe8
test r14, r14
je 0x14001bbd1
mov rcx, qword [r14]
test rcx, rcx
jne 0x14001bdcd
lea rax, [r14 - 0x18]
cmp r14, rbx
mov r14, rax
jne 0x14001bd96
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x218], rbx
call fcn.1400bcff8
jmp 0x14001bd17
mov rax, qword [r14 + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001bbd1
jmp 0x14001bf30
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movaps xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
movups xmmword [rdi + 0x18], xmm0
movups xmmword [rdi + 0x28], xmm0
mov qword [rdi + 0x38], rax
mov byte [rdi + 0x40], 0
lea rcx, [rsp + 0x270]
call fcn.1400f0560
lea rcx, [rsp + 0x250]
mov rdx, rax
mov r8, rdi
call fcn.14003ffe0
mov r15d, 0x8000ffff
test al, al
je 0x14001bd43
mov ecx, 1
call fcn.140085570
test al, al
je 0x14001be81
lea rcx, [rsp + 0x250]
call fcn.1400347e0
test al, al
jne 0x14001be81
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xbe
mov r9d, 1
call fcn.1400382f0
mov rcx, rdi
call fcn.140038820
mov ecx, 1
call fcn.140085570
xor r15d, r15d
test al, al
je 0x14001bd43
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x210]
mov rdx, rdi
call fcn.1401150d0
lea rcx, [rsp + 0xa0]
mov rdx, rdi
call fcn.140115270
test al, al
jne 0x14001beed
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xc0
mov r9d, 1
call fcn.1400382f0
mov rcx, rdi
call fcn.140038820
lea rcx, [rsp + 0x210]
call fcn.140086b20
jmp 0x14001bd43
mov qword [rsp + 0x2c8], rcx
call fcn.1400bcff8
jmp 0x14001bd28
mov qword [rsp + 0xd8], rcx
call fcn.1400bcff8
jmp 0x14001bd35
mov rcx, r12
call fcn.1400bcff8
jmp 0x14001baea
mov qword [r14 + 8], rcx
call fcn.1400bcff8
jmp 0x14001bda7
xor esi, esi
jmp 0x14001b914
call fcn.140086700
mov rcx, qword [rbx]
call fcn.140082b50
mov qword [rbx], 0
jmp 0x14001b9c0
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x25
call fcn.1400f3d70
lea rcx, [rsp + 0x2c0]
call fcn.1400f0ea0
int3