Function at 0x14002fcbc
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x328
movaps xmmword [rsp + 0x310], xmm6
mov rdi, r9
mov rbp, r8
mov rsi, rdx
mov r13, rcx
mov r14, qword [rsp + 0x398]
mov rax, qword [0x140162028]
xor rax, rsp
mov qword [rsp + 0x308], rax
movzx eax, byte [rcx + 0x17]
test al, al
jns 0x14002fd09
mov rax, qword [r13 + 8]
mov ebx, 0x80070057
test r14, r14
je 0x1400308a9
mov r12d, dword [rsp + 0x390]
test r12d, r12d
je 0x1400308a9
test rax, rax
je 0x1400308a9
cmp byte [rsi + 0x17], 0
jns 0x14002fd4e
cmp qword [rsi + 8], 0
je 0x14002fd74
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1b0], xmm0
mov rcx, qword [rsi]
jmp 0x14002fd5e
je 0x14002fd74
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1b0], xmm0
mov rcx, rsi
lea rdx, [rsp + 0x1b0]
call qword [sym.imp.ole32.dll_IIDFromString]
test eax, eax
js 0x1400300bd
movzx eax, byte [rbp + 0x17]
mov rdx, rbp
test al, al
jns 0x14002fd87
mov rdx, qword [rbp]
mov rax, qword [rbp + 8]
lea r8, [rdx + rax*2]
lea rbx, [rsp + 0x170]
mov rcx, rbx
call fcn.14006e090
movzx eax, byte [rbx + 0x17]
test al, al
mov rcx, qword [rbx]
cmovns rcx, rbx
lea r15, [rsp + 0x140]
mov qword [r15], rcx
cmovs rax, qword [rbx + 8]
mov qword [r15 + 8], rax
lea rcx, [rsp + 0x1b0]
mov rdx, r15
call fcn.140078100
xor eax, eax
cmp byte [rbx + 0x17], al
js 0x1400300cb
mov rax, qword [rsp + 0x1b0]
cmp rax, qword [rsp + 0x1b8]
je 0x14002fe12
xorps xmm0, xmm0
movaps xmmword [rsp + 0x170], xmm0
cmp byte [rdi + 0x17], 0
mov rcx, rdi
jns 0x14002fe00
mov rcx, qword [rdi]
lea rdx, [rsp + 0x170]
call qword [sym.imp.ole32.dll_IIDFromString]
mov ebx, eax
jmp 0x14002fe17
mov ebx, 0x80070057
lea rcx, [rsp + 0x1b0]
call fcn.140064b80
test ebx, ebx
js 0x1400308a9
lea rcx, [rsp + 0x170]
xor edx, edx
call fcn.14005ce80
movzx eax, byte [rsi + 0x17]
test al, al
jns 0x14002fe47
mov rax, qword [rsi + 8]
test rax, rax
je 0x14002fea4
mov r12, r15
mov r15, r14
xorps xmm0, xmm0
lea rbx, [rsp + 0x1b0]
movups xmmword [rbx + 8], xmm0
mov byte [rbx + 0x17], 7
mov dword [rbx], 0x67707061
mov dword [rbx + 3], 0x64697567
xor r14d, r14d
mov byte [rbx + 7], r14b
lea rcx, [rsp + 0x170]
mov rdx, rbx
mov r8, rsi
call fcn.14005dfd0
cmp byte [rbx + 0x17], r14b
js 0x14003013b
mov r14, r15
mov r15, r12
mov r12d, dword [rsp + 0x390]
movabs rax, 0xf00000000000000
lea rsi, [rsp + 0x1b0]
mov qword [rsi + 0x10], rax
movabs rax, 0x2d726573776f7262
mov qword [rsi], rax
movabs rax, 0x6e6f69737265762d
mov qword [rsi + 7], rax
xor ebx, ebx
mov byte [rsi + 0xf], bl
lea rcx, [rsp + 0x170]
mov rdx, rsi
mov r8, rbp
call fcn.14005dfd0
cmp byte [rsi + 0x17], bl
js 0x1400300e4
xorps xmm6, xmm6
lea rsi, [rsp + 0x1b0]
movaps xmmword [rsi], xmm6
mov qword [rsi + 0x10], 0
mov byte [rsi + 0x17], 9
movabs rax, 0x696e6f6973736573
mov qword [rsi], rax
mov word [rsi + 8], 0x64
lea rcx, [rsp + 0x170]
mov rdx, rsi
mov r8, rdi
call fcn.14005dfd0
cmp byte [rsi + 0x17], 0
js 0x1400300f6
lea rsi, [rsp + 0x1b0]
movaps xmmword [rsi], xmm6
mov qword [rsi + 0x10], 0
mov byte [rsi + 0x17], 6
mov dword [rsi], 0x74737973
mov word [rsi + 4], 0x6d65
xor edi, edi
mov byte [rsi + 6], dil
lea rcx, [rsp + 0x170]
mov rdx, rsi
call fcn.14005df70
cmp byte [rsi + 0x17], dil
js 0x140030108
xorps xmm0, xmm0
lea rcx, [rsp + 0x80]
movaps xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
call fcn.14002fa63
test eax, eax
js 0x1400300c4
lea rax, str.msedgerecovery.exe
lea rdx, [rsp + 0x58]
mov qword [rdx], rax
mov qword [rdx + 8], 0x12
lea rcx, [rsp + 0x68]
call fcn.140060c90
lea rax, [0x140132115]
lea rdx, [rsp + 0x1b0]
mov qword [rdx], rax
mov qword [rdx + 8], 0x20
lea rcx, [rsp + 0x40]
call fcn.14002f4b8
mov dword [rsp + 0x3c], 2
lea rsi, [rsp + 0xb8]
mov rcx, rsi
xor edx, edx
call fcn.14007a810
mov ecx, r12d
mov rdx, rsi
call fcn.14002f52d
test eax, eax
js 0x1400300dd
xorps xmm6, xmm6
movaps xmmword [rsp + 0xa0], xmm6
xor eax, eax
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0x120]
mov qword [rcx + 0x10], rax
movaps xmmword [rcx], xmm6
lea rdx, [rsp + 0x80]
call fcn.1400634a0
test al, al
je 0x14003011a
lea rax, str.recovery_component_inner.crx
lea r8, [rsp + 0xf8]
mov qword [r8], rax
mov qword [r8 + 8], 0x1c
lea rcx, [rsp + 0x120]
lea rdx, [rsp + 0x108]
call fcn.1400618b0
movaps xmmword [rsp + 0xe0], xmm6
mov qword [rsp + 0xf0], 0
cmp byte [r13 + 0x17], 0
js 0x14003014d
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [r13]
movaps xmmword [rsp + 0xe0], xmm0
jmp 0x1400301ce
mov ebx, eax
jmp 0x1400308a9
mov ebx, eax
jmp 0x140030885
mov rcx, qword [rsp + 0x170]
call fcn.1400ef7cc
jmp 0x14002fdd7
mov ebx, eax
jmp 0x140030853
mov rcx, qword [rsp + 0x1b0]
call fcn.1400ef7cc
jmp 0x14002fef6
mov rcx, qword [rsp + 0x1b0]
call fcn.1400ef7cc
jmp 0x14002ff40
mov rcx, qword [rsp + 0x1b0]
call fcn.1400ef7cc
jmp 0x14002ff83
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
jmp 0x1400305e0
mov rcx, qword [rsp + 0x1b0]
call fcn.1400ef7cc
jmp 0x14002fe96
movabs rbp, 0x7fffffffffffffef
mov rbx, qword [r13 + 8]
cmp rbx, rbp
ja 0x14003094f
mov r12, r14
mov r14, qword [r13]
cmp rbx, 0xb
jb 0x1400301a6
lea rsi, [rbx + 8]
and rsi, 0xfffffffffffffff8
lea rcx, [rsi + rsi]
call fcn.1400ef770
mov rdi, rax
mov qword [rsp + 0xe0], rax
add rbp, 0x11
or rbp, rsi
mov qword [rsp + 0xf0], rbp
mov qword [rsp + 0xe8], rbx
jmp 0x1400301b6
lea rdi, [rsp + 0xe0]
mov byte [rdi + 0x17], bl
test rbx, rbx
je 0x1400301c5
lea r8, [rbx + rbx]
mov rcx, rdi
mov rdx, r14
call fcn.1400f23d0
mov word [rdi + rbx*2], 0
mov r14, r12
lea rcx, [rsp + 0x1b0]
call fcn.140060aa0
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x1400302e9
mov ecx, 0x28
call fcn.1400ef770
mov dword [rax], 1
lea rcx, [0x140030960]
mov qword [rax + 8], rcx
lea rcx, [0x140030970]
mov qword [rax + 0x10], rcx
lea rcx, [0x14005cda0]
mov qword [rax + 0x18], rcx
mov qword [rsp + 0x140], rax
lea rcx, [rsp + 0xc8]
mov qword [rcx], 0
call fcn.14005cdd0
lea rsi, [rsp + 0x1b0]
lea rdx, [rsp + 0xe0]
mov rcx, rsi
mov r8d, 0x80021
call fcn.140060b30
mov rcx, qword [rsi]
lea rax, [rcx + 1]
cmp rax, 1
ja 0x1400302f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
lea rcx, [rsp + 0x140]
call fcn.14005cd30
test ebx, ebx
js 0x1400303d6
lea rsi, [rsp + 0x140]
mov rcx, rsi
call fcn.140060aa0
lea rdx, [rsp + 0x108]
mov rcx, rsi
mov r8d, 0x80048
call fcn.140060b30
mov rax, qword [rsi]
inc rax
cmp rax, 1
ja 0x140030325
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
jmp 0x1400303c9
mov ebx, eax
jmp 0x1400303d6
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov ebx, 0x80070057
cmp eax, 1
jne 0x140030281
lea rcx, [rsp + 0x1b0]
call fcn.140079a50
dec rax
xor ecx, ecx
cmp rax, 0x98967f
mov ebx, 0x80070057
cmovb ebx, ecx
jmp 0x140030281
mov ecx, 0x10000
call fcn.1400ef770
mov rsi, rax
xor ebx, ebx
mov r8d, 0x10000
mov rcx, rax
xor edx, edx
call fcn.1400f27e0
lea rdi, [rsp + 0x1b0]
lea r12, [rsp + 0x140]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x10000
call fcn.140079860
test eax, eax
js 0x14003039a
mov ebp, eax
test eax, eax
je 0x1400303b8
mov eax, ebp
add rbx, rax
cmp rbx, 0x989680
ja 0x1400303bc
mov rcx, r12
mov rdx, rsi
mov r8d, ebp
call fcn.140079960
test eax, eax
js 0x14003039a
cmp eax, ebp
je 0x140030354
mov ebx, 0x8000ffff
jmp 0x1400303c1
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
cmovne ebx, ecx
jmp 0x1400303c1
xor ebx, ebx
jmp 0x1400303c1
mov ebx, 0x80070057
mov rcx, rsi
call fcn.1400ef7cc
lea rcx, [rsp + 0x140]
call fcn.140060be0
lea rcx, [rsp + 0x1b0]
call fcn.140060be0
cmp byte [rsp + 0xf7], 0
jns 0x1400303fa
mov rcx, qword [rsp + 0xe0]
call fcn.1400ef7cc
test ebx, ebx
js 0x1400305c9
xorps xmm6, xmm6
movaps xmmword [rsp + 0x140], xmm6
xor eax, eax
mov qword [rsp + 0x150], rax
lea rdi, [rsp + 0x1b0]
mov qword [rdi + 0x10], rax
movaps xmmword [rdi], xmm6
lea rsi, [rsp + 0x2f0]
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.14002f626
mov ecx, 0x18
call fcn.1400ef770
lea rbx, [rsp + 0xc8]
mov qword [rbx], rax
lea rbp, [rax + 0x18]
mov qword [rbx + 0x10], rbp
mov rcx, rax
mov rdx, rsi
call fcn.14002f626
mov qword [rbx + 8], rbp
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x108]
lea rdx, [rsp + 0x3c]
mov r8, rbx
mov r9, rdi
call fcn.14007f5d4
mov edi, eax
mov rcx, rbx
call fcn.14003097a
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400304a8
mov qword [rsp + 0x2f8], rcx
call fcn.1400ef7cc
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x1400304c2
mov qword [rsp + 0x1b8], rcx
call fcn.1400ef7cc
mov ebx, 0x80092009
test edi, edi
jne 0x1400305bb
lea rcx, [rsp + 0x108]
lea rdx, [rsp + 0x120]
call fcn.140081004
mov ebx, 0x8000ffff
test al, al
je 0x1400305bb
mov ecx, 1
call fcn.140063a50
test al, al
je 0x14003053d
lea rcx, [rsp + 0x108]
xor edx, edx
call fcn.140078560
test al, al
jne 0x14003053d
lea rdx, str..._.._chrome_elevation_service_elevated_recovery_impl.cc
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
mov r8d, 0xbb
mov r9d, 1
call fcn.140063ae0
mov rcx, rsi
call fcn.140063e50
mov ecx, 1
call fcn.140063a50
xor ebx, ebx
test al, al
je 0x1400305bb
lea rcx, [rsp + 0x120]
lea rsi, [rsp + 0xc8]
mov rdx, rsi
call fcn.1400633c0
lea rcx, [rsp + 0xa0]
mov rdx, rsi
call fcn.140063540
test al, al
jne 0x1400305a4
lea rdx, str..._.._chrome_elevation_service_elevated_recovery_impl.cc
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
mov r8d, 0xbd
mov r9d, 1
call fcn.140063ae0
mov rcx, rsi
call fcn.140063e50
cmp byte [rsp + 0xdf], 0
jns 0x1400305bb
mov rcx, qword [rsp + 0xc8]
call fcn.1400ef7cc
cmp byte [rsp + 0x157], 0
js 0x1400308d7
cmp byte [rsp + 0x11f], 0
jns 0x1400305e0
mov rcx, qword [rsp + 0x108]
call fcn.1400ef7cc
lea rcx, [rsp + 0x120]
call fcn.140063470
test ebx, ebx
js 0x140030846
lea rcx, [rsp + 0xa0]
lea rsi, [rsp + 0x140]
lea r8, [rsp + 0x68]
mov rdx, rsi
call fcn.140061fd0
lea rdi, [rsp + 0x1b0]
mov rcx, rdi
mov rdx, rsi
call fcn.14005ced0
lea rdx, [rsp + 0x170]
mov rcx, rdi
xor r8d, r8d
call fcn.14005f220
lea r8, [rsp + 0x108]
mov qword [r8], 0
lea rdx, [rsp + 0xb8]
mov rcx, rdi
call fcn.14002f6a1
mov ebx, eax
test eax, eax
js 0x1400307a6
lea rcx, [rsp + 0xa0]
lea rsi, [rsp + 0x120]
mov rdx, rsi
call fcn.1400633c0
mov rcx, rsi
call fcn.14002f8bf
cmp byte [rsi + 0x17], 0
jns 0x140030694
mov rcx, qword [rsp + 0x120]
call fcn.1400ef7cc
mov rsi, qword [rsp + 0x108]
mov qword [rsp + 0x108], 0
lea rdi, [rsi + 1]
cmp rdi, 2
jb 0x1400306eb
call fcn.140063690
mov rbp, rax
mov r15, qword [rsp + 0x368]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x14003090b
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbp
lea r8, [rsp + 0x108]
mov rdx, rsi
mov r9, r15
call qword [rax + 0x10]
cmp qword [r14], rsi
je 0x1400307a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [r14]
inc rax
cmp rax, 2
jb 0x140030761
call fcn.140063690
mov r12, rax
mov r15, qword [rsp + 0x368]
mov r13, qword [r14]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x14003091c
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
mov rdx, r13
mov r8, r14
mov r9, r15
call qword [rax + 0x10]
mov r15, qword [r14]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x14003092d
mov rax, qword [rcx]
mov rdx, r15
call qword [rax]
mov qword [r14], 0
cmp rdi, 2
jb 0x14003079e
mov qword [r14], rsi
call fcn.140063690
mov rdi, rax
mov r15, qword [rsp + 0x368]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x14003093e
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
mov rdx, rsi
mov r8, r14
mov r9, r15
call qword [rax + 8]
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x108]
inc rax
cmp rax, 2
jb 0x140030822
call fcn.140063690
mov rdi, rax
mov rsi, qword [rsp + 0x368]
mov rbp, qword [rsp + 0x108]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x1400308e9
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
lea rdi, [rsp + 0x108]
mov rdx, rbp
mov r8, rdi
mov r9, rsi
call qword [rax + 0x10]
mov rsi, qword [rdi]
mov rcx, qword [0x14016a370]
test rcx, rcx
je 0x1400308fa
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax]
mov qword [rsp + 0x108], 0
lea rcx, [rsp + 0x1b0]
call fcn.14005d0a0
cmp byte [rsp + 0x157], 0
jns 0x140030846
mov rcx, qword [rsp + 0x140]
call fcn.1400ef7cc
lea rcx, [rsp + 0xa0]
call fcn.140063470
lea rcx, [rsp + 0xb8]
call fcn.14007a940
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140030874
mov qword [rsp + 0x48], rcx
call fcn.1400ef7cc
cmp byte [rsp + 0x7f], 0
jns 0x140030885
mov rcx, qword [rsp + 0x68]
call fcn.1400ef7cc
cmp byte [rsp + 0x97], 0
jns 0x14003089c
mov rcx, qword [rsp + 0x80]
call fcn.1400ef7cc
lea rcx, [rsp + 0x170]
call fcn.14005d0a0
mov rcx, qword [rsp + 0x308]
xor rcx, rsp
call fcn.1400f0560
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x310]
add rsp, 0x328
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x140]
call fcn.1400ef7cc
jmp 0x1400305c9
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x1400307df
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x14003080e
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x1400306d2
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x14003072b
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x140030752
call fcn.1400dae20
mov rcx, qword [0x14016a370]
jmp 0x14003078a
lea rcx, [rsp + 0xe0]
call fcn.14005994c
int3