Function at 0x14001ae30
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov r14, r9
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov rax, qword [0x140196028]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
movaps xmm6, xmmword [0x14016f5d0]
lea rcx, [rsp + 0xc0]
movaps xmmword [rcx], xmm6
xor edx, edx
call fcn.140032c70
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b12b
mov qword [rsp + 0x48], rsi
mov ebp, dword [rsp + 0x380]
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea r15, [rsp + 0x50]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bc7dc
mov r13, rax
lea rdx, [0x14001bb50]
lea r8, [0x14001bb60]
mov rcx, rax
call fcn.1400863a0
lea rbx, [rsp + 0x290]
mov qword [rbx], r13
mov rcx, r15
mov rdx, rbx
call fcn.1400864a0
lea r15, [rsp + 0xd0]
mov rcx, r15
mov edx, ebp
mov r8d, 0x40
call fcn.1401143f0
lea r13, [rsp + 0xc0]
mov rcx, r13
mov rdx, r15
call fcn.140032d20
mov rcx, r15
call fcn.140032cf0
mov rcx, r13
call fcn.1400825f0
test al, al
jne 0x14001af61
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001b116
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x50]
call fcn.1400864d0
test r15d, r15d
jns 0x14001af6b
jmp 0x14001b3d3
lea rcx, [rsp + 0x50]
call fcn.1400864d0
mov r15, qword [rsp + 0x370]
lea rcx, [rsp + 0xa0]
mov qword [rcx + 0x10], rsi
movaps xmmword [rcx], xmm6
call fcn.140114f90
lea r13, [rsp + 0x270]
mov qword [r13 + 0x10], rsi
movaps xmmword [r13], xmm6
mov rcx, r13
call fcn.140114f90
mov rcx, r13
mov rdx, r15
call fcn.1401150b0
test al, al
jne 0x14001afe4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
jne 0x14001b17b
lea rcx, [rsp + 0x270]
call fcn.140115080
mov r15d, 0x80004005
jmp 0x14001b3c6
lea r15, [rsp + 0x250]
mov qword [r15 + 0x10], rsi
movaps xmmword [r15], xmm6
lea rcx, [rsp + 0x270]
call fcn.1400efd80
lea rcx, str.ChromeRecoveryCRX.crx
lea r8, [rsp + 0x240]
mov qword [r8], rcx
mov qword [r8 + 8], 0x15
mov rcx, rax
mov rdx, r15
call fcn.140087c90
lea rcx, [rsp + 0x228]
mov rdx, r12
call fcn.140086550
lea rcx, [rsp + 0xd0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.140039820
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001b148
lea r15, [rsp + 0x290]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bc7dc
mov r12, rax
lea rdx, [0x14001bb50]
lea r8, [0x14001bb60]
mov rcx, rax
call fcn.1400863a0
lea rdx, [rsp + 0x210]
mov qword [rdx], r12
mov rcx, r15
call fcn.1400864a0
lea r15, [rsp + 0xd0]
lea rdx, [rsp + 0x228]
mov rcx, r15
mov r8d, 0x80021
call fcn.1400398b0
mov rcx, r15
call fcn.140082630
test al, al
je 0x14001b417
lea rcx, [rsp + 0xd0]
call fcn.140033870
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov r15d, 0x80070057
cmp eax, 1
jne 0x14001b139
lea rcx, [rsp + 0xd0]
call fcn.1400339b0
dec rax
cmp rax, 0x98967e
ja 0x14001b139
lea rcx, [rsp + 0x290]
call fcn.1400864d0
jmp 0x14001b44c
lea rcx, [rsp + 0x50]
call fcn.1400864d0
mov r15d, 0x80004005
jmp 0x14001b3d3
mov r15d, eax
jmp 0x14001b3d3
mov r15d, 0x80004005
lea rcx, [rsp + 0x290]
call fcn.1400864d0
jmp 0x14001b14b
mov r15d, eax
lea rcx, [rsp + 0xd0]
call fcn.140088a90
lea rcx, [rsp + 0x228]
call fcn.1400867b0
test r15d, r15d
jns 0x14001b61a
lea rcx, [rsp + 0x250]
call fcn.1400867b0
lea rcx, [rsp + 0x270]
call fcn.140115080
test r15d, r15d
js 0x14001b3c6
mov rdi, qword [rsp + 0x378]
lea rbx, [rsp + 0x290]
mov qword [rbx + 0x10], rsi
movaps xmmword [rbx], xmm6
lea rcx, [rsp + 0xa0]
call fcn.1400efd80
mov rcx, rax
mov rdx, rbx
mov r8, rdi
call fcn.140039260
lea rdi, [rsp + 0x50]
movaps xmmword [rdi + 0x40], xmm6
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
mov rdx, rbx
call fcn.140039a10
xor ebp, ebp
mov rcx, rdi
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
call fcn.140116c10
lea rsi, [rsp + 0xd0]
mov r8d, 0x98
mov rcx, rsi
mov dl, 0xaa
call fcn.1400bfe80
mov rcx, rsi
call fcn.140036650
mov byte [rsi + 0x22], 1
lea rcx, [rsp + 0xd8]
call fcn.140034650
lea rbx, [rsp + 0x270]
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140032e50
mov rcx, rbx
call fcn.1400825f0
test al, al
je 0x14001b2e5
lea rsi, [rsp + 0x250]
mov qword [rsi], 0
lea rcx, [rsp + 0xc0]
call fcn.140082610
mov rdi, rax
lea rcx, [rsp + 0x270]
call fcn.140082610
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0x101000
mov rcx, rax
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14001b2e5
mov rsi, qword [rsp + 0x250]
test rsi, rsi
je 0x14001b2de
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r15d, r15d
cmp rsi, 0xffffffffffffffff
je 0x14001b8fe
call fcn.140086390
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001b305
xor esi, esi
xor r15d, r15d
jmp 0x14001b305
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
xor esi, esi
lea rcx, [rsp + 0x270]
call fcn.140032cf0
lea rcx, [rsp + 0xd0]
call fcn.1400366c0
test r15d, r15d
js 0x14001b398
mov rbx, qword [rsp + 0x388]
lea rcx, [rsp + 0xa0]
lea rdi, [rsp + 0xd0]
mov rdx, rdi
call fcn.140114fa0
mov rcx, rdi
call fcn.14001b960
mov rcx, rdi
call fcn.1400867b0
lea r14, [rsi + 1]
cmp r14, 2
jb 0x14001b363
call fcn.140086390
cmp qword [rbx], rsi
je 0x14001b396
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [rbx]
inc rax
cmp rax, 2
jae 0x14001b905
cmp r14, 2
jb 0x14001b38e
mov qword [rbx], rsi
call fcn.140086390
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14001b3af
call fcn.140086390
mov rcx, rsi
call fcn.140082310
lea rcx, [rsp + 0x50]
call fcn.140039ef0
lea rcx, [rsp + 0x290]
call fcn.1400867b0
lea rcx, [rsp + 0xa0]
call fcn.140115080
lea rcx, [rsp + 0xc0]
call fcn.140032cf0
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1400bdd30
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001b133
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x290]
call fcn.1400864d0
test r15d, r15d
js 0x14001b14b
lea r15, [rsp + 0x290]
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, r15
call fcn.140039820
lea rdx, [rsp + 0x250]
mov rcx, r15
mov r8d, 0x80048
call fcn.1400398b0
mov rcx, r15
call fcn.140082630
test al, al
jne 0x14001b4bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
lea rcx, [rsp + 0x290]
call fcn.140088a90
jmp 0x14001b14b
mov ecx, 0x10000
call fcn.1400bc7dc
mov r12, rax
lea rdx, [rax + 0x10000]
neg rax
xor ecx, ecx
cmp rax, rcx
je 0x14001b91e
mov byte [r12 + rcx], 0
inc rcx
cmp rcx, 0x10000
jne 0x14001b4d5
mov qword [rsp + 0x40], rdx
xor r13d, r13d
lea r15, [rsp + 0xd0]
mov rcx, r15
mov rdx, r12
mov r8d, 0x10000
call fcn.140082780
test eax, eax
js 0x14001b556
je 0x14001b551
mov ebp, eax
mov eax, eax
add r13, rax
cmp r13, 0x989680
ja 0x14001b549
lea rcx, [rsp + 0x290]
mov rdx, r12
mov r8d, ebp
call fcn.140033880
test eax, eax
js 0x14001b556
cmp eax, ebp
je 0x14001b4ff
mov r15d, 0x8000ffff
jmp 0x14001b574
mov r15d, 0x80070057
jmp 0x14001b574
xor r15d, r15d
jmp 0x14001b574
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
test r12, r12
je 0x14001b4aa
mov rax, qword [rsp + 0x40]
dec rax
cmp rax, 0xffff
ja 0x14001b8e3
lea rax, str.null_pointer_given_to_destroy_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__loc___nullptr
mov r8d, 0x41
call fcn.1400f3d40
mov rax, qword [rsp + 0x2c8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b591
jmp 0x14001b8bf
js 0x14001b94a
mov rcx, r14
call fcn.1400bc7dc
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], rax
lea r12, [rax + r14]
mov qword [rsp + 0x2d0], r12
mov rcx, rax
mov rdx, r15
mov r8, r14
call fcn.1400bf7d0
mov qword [rsp + 0x2c8], r12
jmp 0x14001b65f
xorps xmm7, xmm7
movaps xmmword [rsp + 0x290], xmm7
xor eax, eax
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0xd0], xmm7
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
mov r15, qword [r14]
mov r14, qword [r14 + 8]
sub r14, r15
jne 0x14001b5d8
mov ecx, 0x18
call fcn.1400bc7dc
lea r14, [rsp + 0x228]
mov qword [r14 - 0x18], rax
mov qword [r14 - 0x10], rax
lea rcx, [rax + 0x18]
mov qword [r14 - 8], rcx
lea r8, [rsp + 0x2d8]
lea rdx, [rsp + 0x2c0]
mov rcx, r14
mov r9, rax
call fcn.1400f0d20
mov qword [r14 - 0x10], rax
movups xmmword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x250]
lea rbx, [rsp + 0x210]
lea r9, [rsp + 0xd0]
mov rdx, rdi
mov r8, rbx
call fcn.14003de80
mov edi, eax
mov rbx, qword [rbx]
test rbx, rbx
jne 0x14001b742
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
jne 0x14001b5bd
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
jne 0x14001b723
mov r15d, 0x80092009
test edi, edi
je 0x14001b7a8
cmp byte [rsp + 0x2a7], 0
jns 0x14001b16e
mov rcx, qword [rsp + 0x290]
call fcn.1400bc818
jmp 0x14001b16e
mov rax, qword [rsp + 0xd8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b591
jmp 0x14001b8d1
mov r14, qword [rsp + 0x218]
mov rcx, rbx
cmp r14, rbx
je 0x14001b77b
add r14, 0xffffffffffffffe8
test r14, r14
je 0x14001b591
mov rcx, qword [r14]
test rcx, rcx
jne 0x14001b78d
lea rax, [r14 - 0x18]
cmp r14, rbx
mov r14, rax
jne 0x14001b756
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x218], rbx
call fcn.1400bc818
jmp 0x14001b6d7
mov rax, qword [r14 + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b591
jmp 0x14001b8f0
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movaps xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
movups xmmword [rdi + 0x18], xmm0
movups xmmword [rdi + 0x28], xmm0
mov qword [rdi + 0x38], rax
mov byte [rdi + 0x40], 0
lea rcx, [rsp + 0x270]
call fcn.1400efd80
lea rcx, [rsp + 0x250]
mov rdx, rax
mov r8, rdi
call fcn.14003f350
mov r15d, 0x8000ffff
test al, al
je 0x14001b703
mov ecx, 1
call fcn.140084d20
test al, al
je 0x14001b841
lea rcx, [rsp + 0x250]
call fcn.1400340b0
test al, al
jne 0x14001b841
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xbe
mov r9d, 1
call fcn.140037bc0
mov rcx, rdi
call fcn.1400380f0
mov ecx, 1
call fcn.140084d20
xor r15d, r15d
test al, al
je 0x14001b703
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x210]
mov rdx, rdi
call fcn.140114fa0
lea rcx, [rsp + 0xa0]
mov rdx, rdi
call fcn.140115140
test al, al
jne 0x14001b8ad
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xc0
mov r9d, 1
call fcn.140037bc0
mov rcx, rdi
call fcn.1400380f0
lea rcx, [rsp + 0x210]
call fcn.1400867b0
jmp 0x14001b703
mov qword [rsp + 0x2c8], rcx
call fcn.1400bc818
jmp 0x14001b6e8
mov qword [rsp + 0xd8], rcx
call fcn.1400bc818
jmp 0x14001b6f5
mov rcx, r12
call fcn.1400bc818
jmp 0x14001b4aa
mov qword [r14 + 8], rcx
call fcn.1400bc818
jmp 0x14001b767
xor esi, esi
jmp 0x14001b2d4
call fcn.140086390
mov rcx, qword [rbx]
call fcn.140082310
mov qword [rbx], 0
jmp 0x14001b380
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x25
call fcn.1400f3d40
lea rcx, [rsp + 0x2c0]
call fcn.1400f0d00
int3