Function at 0x14001b410
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2c8
movaps xmmword [rsp + 0x2b0], xmm7
movaps xmmword [rsp + 0x2a0], xmm6
mov rsi, r9
mov r12, r8
mov r14, rdx
mov rdi, rcx
mov rax, qword [0x140158018]
xor rax, rsp
mov qword [rsp + 0x298], rax
movaps xmm6, xmmword [0x140136a00]
lea rcx, [rsp + 0xb0]
movaps xmmword [rcx], xmm6
xor edx, edx
call fcn.14006ff80
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b512
mov ebx, dword [rsp + 0x340]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea r15, [rsp + 0x40]
mov qword [r15], r13
mov ecx, 0x28
call fcn.14009cf68
mov rbp, rax
lea rdx, [0x14001bfe0]
lea r8, [0x14001bff0]
mov rcx, rax
call fcn.14006b7a0
lea rdx, [rsp + 0x260]
mov qword [rdx], rbp
mov rcx, r15
call fcn.14006b710
lea rbp, [rsp + 0xc0]
mov rcx, rbp
mov edx, ebx
mov r8d, 0x40
call fcn.1400e7350
lea rbx, [rsp + 0xb0]
mov rcx, rbx
mov rdx, rbp
call fcn.140070030
mov rcx, rbp
call fcn.140070000
mov rcx, rbx
call fcn.1400700e0
test al, al
je 0x14001b519
lea rcx, [rsp + 0x40]
call fcn.14006b740
jmp 0x14001b547
mov ebx, eax
jmp 0x14001bd84
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
movzx ebx, bp
or ebx, 0x80070000
lea rcx, [rsp + 0x40]
call fcn.14006b740
test ebp, ebp
cmovle ebx, ebp
je 0x14001b6ee
test ebx, ebx
js 0x14001bd84
mov rbx, qword [rsp + 0x330]
lea rcx, [rsp + 0x90]
mov qword [rcx + 0x10], r13
movaps xmmword [rcx], xmm6
call fcn.1400e4870
lea rbp, [rsp + 0x260]
mov qword [rbp + 0x10], r13
movaps xmmword [rbp], xmm6
mov rcx, rbp
call fcn.1400e4870
mov rcx, rbp
mov rdx, rbx
call fcn.1400e4990
test al, al
je 0x14001b6bd
lea rbx, [rsp + 0x240]
mov qword [rbx + 0x10], r13
movaps xmmword [rbx], xmm6
lea rcx, [rsp + 0x260]
call fcn.1400c8a20
lea rcx, str.ChromeRecoveryCRX.crx
lea r8, [rsp + 0x230]
mov qword [r8], rcx
mov qword [r8 + 8], 0x15
mov rcx, rax
mov rdx, rbx
call fcn.14006daf0
lea rcx, [rsp + 0x218]
mov rdx, rdi
call fcn.14006ca50
lea rcx, [rsp + 0xc0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.14002f2a0
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b6f8
lea rdi, [rsp + 0x40]
mov qword [rdi], r13
mov ecx, 0x28
call fcn.14009cf68
mov rbx, rax
lea rdx, [0x14001bfe0]
lea r8, [0x14001bff0]
mov rcx, rax
call fcn.14006b7a0
lea rdx, [rsp + 0x200]
mov qword [rdx], rbx
mov rcx, rdi
call fcn.14006b710
lea rdi, [rsp + 0xc0]
lea rdx, [rsp + 0x218]
mov rcx, rdi
mov r8d, 0x80021
call fcn.14002f330
mov rcx, rdi
call fcn.14006fd20
test al, al
je 0x14001b6ff
lea rcx, [rsp + 0xc0]
call fcn.140032240
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov ebx, 0x80070057
cmp eax, 1
jne 0x14001b7e1
lea rcx, [rsp + 0xc0]
call fcn.140032380
dec rax
cmp rax, 0x98967e
ja 0x14001b7e1
lea rcx, [rsp + 0x40]
call fcn.14006b740
jmp 0x14001b72b
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jne 0x14001bb36
lea rcx, [rsp + 0x260]
call fcn.1400e4960
mov ebx, 0x80004005
jmp 0x14001bd77
mov ebx, 0x80004005
jmp 0x14001bd84
mov ebx, eax
jmp 0x14001b849
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
je 0x14001b7dc
lea rcx, [rsp + 0x40]
call fcn.14006b740
test ebx, ebx
js 0x14001b849
lea rdi, [rsp + 0x40]
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
call fcn.14002f2a0
lea rdx, [rsp + 0x240]
mov rcx, rdi
mov r8d, 0x80048
call fcn.14002f330
mov rcx, rdi
call fcn.14006fd20
test al, al
je 0x14001b7ed
mov qword [rsp + 0x38], r14
mov ecx, 0x10000
call fcn.14009cf68
mov rdi, rax
xor r14d, r14d
mov r8d, 0x10000
mov rcx, rax
xor edx, edx
call fcn.1400a05e0
lea rcx, [rsp + 0xc0]
mov rdx, rdi
mov r8d, 0x10000
call fcn.14006fe40
test eax, eax
js 0x14001b80b
je 0x14001b829
mov ebp, eax
mov eax, eax
add r14, rax
cmp r14, 0x989680
ja 0x14001b82d
lea rcx, [rsp + 0x40]
mov rdx, rdi
mov r8d, ebp
call fcn.140032250
test eax, eax
js 0x14001b80b
cmp eax, ebp
mov eax, 0x8000ffff
cmovne ebx, eax
je 0x14001b78e
jmp 0x14001b832
mov ebx, 0x80004005
lea rcx, [rsp + 0x40]
call fcn.14006b740
jmp 0x14001b849
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
jmp 0x14001b83f
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
jmp 0x14001b832
xor ebx, ebx
jmp 0x14001b832
mov ebx, 0x80070057
mov rcx, rdi
call fcn.14009cfa4
mov r14, qword [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.14006c970
lea rcx, [rsp + 0xc0]
call fcn.14006c970
lea rcx, [rsp + 0x218]
call fcn.14006cb90
test ebx, ebx
js 0x14001bb29
xorps xmm7, xmm7
movaps xmmword [rsp + 0x40], xmm7
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0xd0], rdi
movaps xmmword [rsp + 0xc0], xmm7
mov qword [rsp + 0x290], rdi
movaps xmmword [rsp + 0x280], xmm7
mov rbx, qword [rsi]
mov rbp, qword [rsi + 8]
mov esi, 0
sub rbp, rbx
jne 0x14001b967
mov ecx, 0x18
call fcn.14009cf68
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x200], rax
lea rbp, [rax + 0x18]
mov qword [rsp + 0x210], rbp
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
sub rsi, rdi
jne 0x14001b9a7
lea rbx, [rsp + 0x200]
mov qword [rbx + 8], rbp
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x240]
lea r9, [rsp + 0xc0]
mov rdx, r12
mov r8, rbx
call fcn.140034e50
mov esi, eax
mov rbx, qword [rbx]
test rbx, rbx
je 0x14001b9fc
mov rax, qword [rsp + 0x208]
cmp rax, rbx
je 0x14001b9e4
lea rdi, [rax - 0x18]
mov rcx, qword [rax - 0x18]
test rcx, rcx
je 0x14001b952
mov qword [rax - 0x10], rcx
call fcn.14009cfa4
mov rax, rdi
cmp rdi, rbx
jne 0x14001b93c
mov rcx, qword [rsp + 0x200]
jmp 0x14001b9e7
js 0x14001bdf0
mov rcx, rbp
call fcn.14009cf68
mov rdi, rax
mov qword [rsp + 0x280], rax
lea rsi, [rax + rbp]
mov qword [rsp + 0x290], rsi
mov rcx, rax
mov rdx, rbx
mov r8, rbp
call fcn.1400a01d0
mov qword [rsp + 0x288], rsi
jmp 0x14001b8af
mov rbx, rax
mov qword [rsp + 0x38], r14
js 0x14001bdfd
mov rcx, rsi
call fcn.14009cf68
mov qword [rbx], rax
lea r14, [rax + rsi]
mov qword [rbx + 0x10], r14
mov rcx, rax
mov rdx, rdi
mov r8, rsi
call fcn.1400a01d0
mov qword [rbx + 8], r14
mov r14, qword [rsp + 0x38]
jmp 0x14001b8e9
mov rcx, rbx
mov qword [rsp + 0x208], rbx
call fcn.14009cfa4
mov rdi, qword [rsp + 0x280]
test rdi, rdi
je 0x14001ba09
mov rcx, rdi
call fcn.14009cfa4
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001ba23
mov qword [rsp + 0xc8], rcx
call fcn.14009cfa4
mov ebx, 0x80092009
test esi, esi
jne 0x14001bb18
lea rcx, [rsp + 0x260]
call fcn.1400c8a20
lea rcx, [rsp + 0x240]
mov rdx, rax
call fcn.1400e8110
mov ebx, 0x8000ffff
test al, al
je 0x14001bb18
mov ecx, 1
call fcn.14006e4a0
test al, al
je 0x14001baa4
lea rcx, [rsp + 0x240]
call fcn.140031610
test al, al
jne 0x14001baa4
lea rdx, str..._.._chrome_elevation_service_elevated_recovery_impl.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8d, 0xbe
mov r9d, 1
call fcn.14002fad0
mov rcx, rsi
call fcn.14002ff70
mov ecx, 1
call fcn.14006e4a0
xor ebx, ebx
test al, al
je 0x14001bb18
lea rcx, [rsp + 0x260]
lea rsi, [rsp + 0x200]
mov rdx, rsi
call fcn.1400e4880
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.1400e4a20
test al, al
jne 0x14001bb0b
lea rdx, str..._.._chrome_elevation_service_elevated_recovery_impl.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8d, 0xc0
mov r9d, 1
call fcn.14002fad0
mov rcx, rsi
call fcn.14002ff70
lea rcx, [rsp + 0x200]
call fcn.14006cb90
cmp byte [rsp + 0x57], 0
jns 0x14001bb29
mov rcx, qword [rsp + 0x40]
call fcn.14009cfa4
lea rcx, [rsp + 0x240]
call fcn.14006cb90
lea rcx, [rsp + 0x260]
call fcn.1400e4960
test ebx, ebx
js 0x14001bd77
mov rsi, qword [rsp + 0x338]
lea rdi, [rsp + 0x260]
mov qword [rdi + 0x10], r13
movaps xmmword [rdi], xmm6
lea rcx, [rsp + 0x90]
call fcn.1400c8a20
mov rcx, rax
mov rdx, rdi
mov r8, rsi
call fcn.14002f580
lea rsi, [rsp + 0x40]
mov qword [rsi + 0x40], r13
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
movaps xmmword [rsi], xmm6
mov rcx, rsi
mov rdx, rdi
call fcn.14002cec0
xor ebp, ebp
mov rcx, rsi
mov rdx, r14
xor r8d, r8d
call fcn.1400e4050
lea rdi, [rsp + 0xc0]
mov r8d, 0x98
mov rcx, rdi
mov dl, 0xaa
call fcn.1400a05e0
mov rcx, rdi
call fcn.140031010
mov byte [rdi + 0x21], 1
lea rcx, [rsp + 0xc8]
call fcn.140031a50
lea rbx, [rsp + 0x240]
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.140032870
mov rcx, rbx
call fcn.1400700e0
test al, al
je 0x14001bc99
lea rsi, [rsp + 0x218]
mov qword [rsi], 0
lea rcx, [rsp + 0xb0]
call fcn.140070100
mov rdi, rax
lea rcx, [rsp + 0x240]
call fcn.140070100
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0x101000
mov rcx, rax
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14001bc99
mov rsi, qword [rsp + 0x218]
test rsi, rsi
je 0x14001bdc7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor ebx, ebx
cmp rsi, 0xffffffffffffffff
je 0x14001bde9
call fcn.14006e490
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001bcb7
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
xor esi, esi
lea rcx, [rsp + 0x240]
call fcn.140070000
lea rcx, [rsp + 0xc0]
call fcn.140031080
test ebx, ebx
js 0x14001bd49
mov r14, qword [rsp + 0x348]
lea rcx, [rsp + 0x90]
lea rdi, [rsp + 0xc0]
mov rdx, rdi
call fcn.1400e4880
mov rcx, rdi
call fcn.14001be10
mov rcx, rdi
call fcn.14006cb90
lea rbp, [rsi + 1]
cmp rbp, 2
jb 0x14001bd14
call fcn.14006e490
cmp qword [r14], rsi
je 0x14001bd47
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [r14]
inc rax
cmp rax, 2
jae 0x14001bdd0
cmp rbp, 2
jb 0x14001bd3f
mov qword [r14], rsi
call fcn.14006e490
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14001bd60
call fcn.14006e490
mov rcx, rsi
call fcn.140070660
lea rcx, [rsp + 0x40]
call fcn.14002d190
lea rcx, [rsp + 0x260]
call fcn.14006cb90
lea rcx, [rsp + 0x90]
call fcn.1400e4960
lea rcx, [rsp + 0xb0]
call fcn.140070000
mov rcx, qword [rsp + 0x298]
xor rcx, rsp
call fcn.14009d8b0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x2a0]
movaps xmm7, xmmword [rsp + 0x2b0]
add rsp, 0x2c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
xor ebx, ebx
jmp 0x14001bcb7
call fcn.14006e490
mov rcx, qword [r14]
call fcn.140070660
mov qword [r14], 0
jmp 0x14001bd31
xor esi, esi
jmp 0x14001bc8f
lea rcx, [rsp + 0x280]
call fcn.1400c9310
mov rcx, rbx
call fcn.1400c9310
int3