Function at 0x1400fc590
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
movaps xmmword [rsp + 0x40], xmm6
mov r14, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x140219028]
xor rax, rsp
mov qword [rsp + 0x38], rax
movabs rdi, 0xfffffffc00000000
lea rax, [0x1401ef770]
mov qword [rcx], rax
mov qword [rsp + 0x28], r9
mov eax, dword [r9]
mov dword [rcx + 8], eax
mov rax, rdx
and rax, rdi
cmp rax, qword [0x140219dc8]
jne 0x1400fc5f3
mov rcx, rbx
call fcn.1400b1f30
mov qword [rsi + 0x10], rbx
test rbx, rbx
je 0x1400fccc5
mov rax, qword [rbx + 0x20]
mov qword [rsi + 0x18], rax
test rax, rax
je 0x1400fc622
mov ecx, 1
lock xadd dword [rax], ecx
cmp ecx, 0x7fffffff
je 0x1400fccb3
mov ecx, 0x28
call fcn.14012c264
mov r15, rax
xor eax, eax
mov dword [r15], eax
mov dword [r15 + 8], eax
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [r15 + 0x10], 0
test rax, rax
je 0x1400fccab
mov r12, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [r15 + 0x10]
inc rax
cmp rax, 2
jae 0x1400fcc75
lea rax, [r12 + 1]
cmp rax, 2
jb 0x1400fc68c
mov qword [r15 + 0x10], r12
call fcn.1400b90a0
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [r15 + 0x10]
mov byte [r15 + 0x18], 0
inc rax
cmp rax, 1
jbe 0x1400fccb0
mov r12, rsi
and r12, rdi
cmp r12, qword [0x140219dc8]
jne 0x1400fc6c1
mov rcx, rsi
call fcn.1400acce0
mov qword [r15 + 0x20], rsi
mov qword [rsi + 0x20], r15
test r15, r15
je 0x1400fc6e3
mov eax, 1
lock xadd dword [r15], eax
cmp eax, 0x7fffffff
je 0x1400fccb6
xorps xmm6, xmm6
movups xmmword [rsi + 0x48], xmm6
movups xmmword [rsi + 0x38], xmm6
movups xmmword [rsi + 0x28], xmm6
mov word [rsi + 0x58], 0x101
xor eax, eax
mov byte [rsi + 0x5a], al
movups xmmword [rsi + 0x68], xmm6
mov qword [rsi + 0x78], 0
mov byte [rsi + 0x80], 1
mov byte [rsi + 0x88], al
mov byte [rsi + 0x90], al
mov byte [rsi + 0x98], al
mov rax, r14
and rax, rdi
cmp rax, qword [0x140219dc8]
jne 0x1400fc739
mov rcx, r14
call fcn.1400acce0
mov qword [rsi + 0xa0], r14
mov qword [rsi + 0xa8], 0
mov ecx, pe_nt_image_headers64
call fcn.14012c264
mov r14, rax
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax + 0x20], xmm6
cmp r12, qword [0x140219dc8]
jne 0x1400fc774
mov rcx, rsi
call fcn.1400acce0
mov qword [r14 + 0x30], rsi
mov qword [r14 + 0x38], 0
mov qword [r14 + 0x40], 0xffffffffffffffff
lea rax, str.delayed
mov qword [r14 + 0x48], rax
xor r13d, r13d
mov byte [r14 + 0x50], r13b
mov byte [r14 + 0x68], r13b
mov dword [r14 + 0x70], 1
mov qword [rsi + 0xb0], r14
mov ecx, pe_nt_image_headers64
call fcn.14012c264
mov r15, rax
xorps xmm6, xmm6
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax + 0x20], xmm6
cmp r12, qword [0x140219dc8]
jne 0x1400fc7d9
mov rcx, rsi
call fcn.1400acce0
lea rax, [rsi + 0x100]
lea rcx, [rsi + 0x1d0]
mov qword [r15 + 0x30], rsi
mov qword [r15 + 0x38], r13
mov r8, 0xffffffffffffffff
mov qword [r15 + 0x40], r8
lea rdx, str.immediate
mov qword [r15 + 0x48], rdx
mov byte [r15 + 0x50], r13b
mov byte [r15 + 0x68], r13b
mov dword [r15 + 0x70], r13d
mov qword [rsi + 0xb8], r15
movups xmmword [rsi + 0xc8], xmm6
movups xmmword [rsi + 0xd4], xmm6
movups xmmword [rsi + 0xe8], xmm6
mov qword [rsi + 0xf8], r13
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x108], rax
mov qword [rsi + 0x110], r13
mov dword [rsi + 0x118], r13d
mov qword [rsi + 0x120], r8
mov al, 1
mov byte [rsi + 0x128], al
mov byte [rsi + 0x130], r13b
mov byte [rsi + 0x148], r13b
mov byte [rsi + 0x150], r13b
mov byte [rsi + 0x158], r13b
mov byte [rsi + 0x1a0], r13b
movups xmmword [rsi + 0x160], xmm6
movups xmmword [rsi + 0x170], xmm6
movups xmmword [rsi + 0x179], xmm6
mov byte [rsi + 0x1a8], al
mov byte [rsi + 0x1b0], r13b
mov byte [rsi + 0x1b8], r13b
mov byte [rsi + 0x1c0], r13b
mov qword [rsi + 0x1c4], r13
test rbx, rbx
je 0x1400fcc05
mov qword [rsp + 0x20], rcx
cmp r12, qword [0x140219dc8]
jne 0x1400fc8d8
mov rcx, rsi
call fcn.1400b1f30
lea r15, [rbx + 0x70]
mov ecx, 0x30
call fcn.14012c264
mov r13, rax
mov dword [rax], 1
lea rax, [0x140122650]
mov qword [r13 + 8], rax
lea r14, [0x140191090]
mov qword [r13 + 0x10], r14
lea rax, [0x140193680]
mov qword [r13 + 0x18], rax
lea rax, [0x140124b70]
mov qword [r13 + 0x20], rax
mov qword [r13 + 0x28], rsi
mov r12, qword [rbx + 0x80]
test r12, r12
je 0x1400fcb63
mov rax, qword [r12 + 8]
xor rax, 0xffffffffffffffff
je 0x1400fcb59
tzcnt rbx, rax
mov rbp, qword [r12 + rbx*8 + 0x10]
mov qword [r12 + rbx*8 + 0x10], r13
test rbp, rbp
jne 0x1400fcbb8
mov r14d, 1
mov ecx, ebx
shl r14, cl
mov rax, qword [r12 + 8]
bts rax, rbx
mov qword [r12 + 8], rax
cmp rax, 0xffffffffffffffff
je 0x1400fcba8
mov rax, r15
and rax, rdi
cmp rax, qword [0x140219dc8]
jne 0x1400fc990
mov rcx, r15
call fcn.1400b1f30
mov rax, qword [rsp + 0x20]
mov qword [rax], r15
and rdi, r12
cmp rdi, qword [0x140219dc8]
jne 0x1400fc9ac
mov rcx, r12
call fcn.1400acce0
mov qword [rsi + 0x1d8], r12
mov qword [rsi + 0x1e0], r14
mov rcx, qword [rsp + 0x28]
mov al, byte [rcx + 4]
mov byte [rsi + 0x1e8], al
mov al, byte [rcx + 5]
mov byte [rsi + 0x1e9], al
mov al, byte [rcx + 6]
mov byte [rsi + 0x1ea], al
lea rdi, [rsi + 0x1f0]
mov rax, qword [rsi]
lea rcx, [fcn.140124ad0]
cmp qword [rax + 0xa8], rcx
jne 0x1400fcc0f
mov ecx, 0x28
call fcn.14012c264
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x1400fca20
mov edx, 1
lock xadd dword [rcx], edx
cmp edx, 0x7fffffff
je 0x1400fccb9
mov rdx, qword [rsi + 0x20]
test rdx, rdx
je 0x1400fca41
mov r8d, 1
lock xadd dword [rdx], r8d
cmp r8d, 0x7fffffff
je 0x1400fccbc
mov dword [rax + 8], 0
lea r8, [0x1401f1930]
mov qword [rax], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rcx
mov byte [rax + 0x20], 0
test rax, rax
je 0x1400fca79
mov ecx, 1
lock xadd dword [rax + 8], ecx
cmp ecx, 0x7fffffff
je 0x1400fccbf
mov qword [rdi], rax
mov ecx, 8
call fcn.14012c264
mov dword [rax], 0
mov byte [rax + 4], 0
mov qword [rsi + 0x1f8], rax
test rax, rax
je 0x1400fcab1
mov ecx, 1
lock xadd dword [rax], ecx
cmp ecx, 0x7fffffff
je 0x1400fccc2
mov qword [rsi + 0x200], rsi
mov rax, qword [rsi + 0xb8]
cmp qword [rax + 0x10], 0
sete byte [rsi + 0x58]
cmp qword [rsi + 0xa8], 0
mov al, byte [rsi + 0x128]
jne 0x1400fcae8
test al, al
je 0x1400fcbfe
mov al, byte [rsi + 0x148]
xor al, 1
mov byte [rsi + 0x59], al
cmp qword [rsi + 0x10], 0
je 0x1400fcb33
mov rcx, qword [rsi + 0x20]
mov eax, dword [rcx + 8]
nop dword [rax]
mov edx, eax
or edx, 0x40000000
lock cmpxchg dword [rcx + 8], edx
jne 0x1400fcb00
mov edx, 0x3fffffff
and eax, edx
mov r8d, eax
neg r8d
lock xadd dword [rcx + 8], r8d
test r8d, r8d
jns 0x1400fcb33
and r8d, edx
cmp r8d, eax
je 0x1400fcc22
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14012ec00
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ebx, 0x40
jmp 0x1400fc943
mov ecx, 0x230
call fcn.14012c264
mov r12, rax
mov r8d, 0x230
mov rcx, rax
xor edx, edx
call fcn.140130d40
lea rdx, [rsp + 0x30]
mov qword [rdx], r12
mov rcx, r15
call fcn.140013340
mov rdx, qword [rbx + 0x78]
mov rcx, r15
call fcn.140013250
mov r12, qword [rbx + 0x80]
jmp 0x1400fc92f
mov rcx, r15
mov rdx, r12
call fcn.140023b20
jmp 0x1400fc979
lock dec dword [rbp]
jne 0x1400fc956
mov rax, qword [rbp + 0x10]
cmp rax, r14
je 0x1400fcbd9
mov rcx, rbp
call qword [0x140243008]
jmp 0x1400fc956
mov rcx, qword [rbp + 0x28]
mov rax, rcx
and rax, rdi
cmp rax, qword [0x140219dc8]
jne 0x1400fcbf1
call fcn.1400b2070
mov rcx, rbp
call fcn.14012c25c
jmp 0x1400fc956
xor eax, eax
jmp 0x1400fcae8
call fcn.1401a2220
jmp 0x1400fc9ba
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
call fcn.140124ad0
jmp 0x1400fca7c
add rcx, 0x10
call fcn.1400d8b30
jmp 0x1400fcb33
xor ecx, ecx
jmp 0x1400fcc6c
xor ecx, ecx
mov dl, 1
jmp 0x1400fcc6e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x140200139]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400fcc30
lea rcx, [sym.chrome.exe_GetHandleVerifier]
cmp rax, rcx
je 0x1400fcc34
call qword [0x140243008]
mov rcx, rax
xor edx, edx
call fcn.140026ae0
jmp 0x1400fcc88
call fcn.1400b90a0
mov r13, qword [r15 + 0x10]
cmp qword [0x140231c98], 0
je 0x1400fcc3a
mov rcx, qword [0x140231c98]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, r13
call qword [0x140243008]
mov qword [r15 + 0x10], 0
jmp 0x1400fc678
mov byte [r15 + 0x18], 0
int3
int3
int3
int3
int3
int3
int3
mov ecx, 8
call fcn.14012c264
mov r15, rax
mov rcx, rax
call fcn.14008fc10
test r15, r15
je 0x1400fccf0
mov eax, 1
lock xadd dword [r15], eax
cmp eax, 0x7fffffff
je 0x1400fcd01
mov rcx, r15
call fcn.14008fc20
mov qword [rsi + 0x18], r15
jmp 0x1400fc622
int3