Function at 0x14015b6f0
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
movaps xmmword [rsp + 0x40], xmm6
mov r15, r9
mov r14, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x14029b028]
xor rax, rsp
mov qword [rsp + 0x38], rax
movabs rdi, 0xfffffffc00000000
mov eax, dword [r9]
mov dword [rcx], eax
mov rax, rdx
and rax, rdi
cmp rax, qword [0x14029be48]
je 0x14015bd0d
mov qword [rsi + 8], rbx
test rbx, rbx
mov qword [rsp + 0x28], r15
je 0x14015bda6
mov rax, qword [rbx + 0x20]
mov qword [rsi + 0x10], rax
test rax, rax
je 0x14015b776
mov ecx, 1
lock xadd dword [rax], ecx
cmp ecx, 0x7fffffff
je 0x14015bd9d
mov ecx, 0x28
call fcn.1401833f4
mov r15, rax
xor eax, eax
mov dword [r15], eax
mov dword [r15 + 8], eax
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [r15 + 0x10], 0
test rax, rax
je 0x14015bd95
mov r12, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [r15 + 0x10]
inc rax
cmp rax, 2
jae 0x14015bd5f
lea rax, [r12 + 1]
cmp rax, 2
jb 0x14015b7e0
mov qword [r15 + 0x10], r12
call fcn.1400ea220
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [r15 + 0x10]
mov byte [r15 + 0x18], 0
inc rax
cmp rax, 1
jbe 0x14015bd9a
mov r12, rsi
and r12, rdi
cmp r12, qword [0x14029be48]
je 0x14015bc5f
mov qword [r15 + 0x20], rsi
mov qword [rsi + 0x18], r15
test r15, r15
je 0x14015b833
mov eax, 1
lock xadd dword [r15], eax
cmp eax, 0x7fffffff
je 0x14015bda0
xorps xmm6, xmm6
movups xmmword [rsi + 0x40], xmm6
movups xmmword [rsi + 0x30], xmm6
movups xmmword [rsi + 0x20], xmm6
mov word [rsi + 0x50], 0x101
xor eax, eax
mov byte [rsi + 0x52], al
movups xmmword [rsi + 0x60], xmm6
mov qword [rsi + 0x70], 0
mov byte [rsi + 0x78], 1
mov byte [rsi + 0x80], al
mov byte [rsi + 0x98], al
mov rax, r14
and rax, rdi
cmp rax, qword [0x14029be48]
je 0x14015bc6c
mov qword [rsi + 0xa0], r14
mov qword [rsi + 0xa8], 0
mov ecx, 0x80
call fcn.1401833f4
mov r14, rax
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax + 0x20], xmm6
cmp r12, qword [0x14029be48]
je 0x14015bc79
mov qword [r14 + 0x30], rsi
xor r13d, r13d
mov qword [r14 + 0x38], r13
mov qword [r14 + 0x40], 0xffffffffffffffff
lea rax, str.delayed
mov qword [r14 + 0x48], rax
mov byte [r14 + 0x50], 0
xorps xmm6, xmm6
movups xmmword [r14 + 0x58], xmm6
mov qword [r14 + 0x68], r13
mov dword [r14 + 0x78], 1
mov qword [rsi + 0xb0], r14
mov ecx, 0x80
call fcn.1401833f4
mov r15, rax
movups xmmword [rax], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax + 0x20], xmm6
cmp r12, qword [0x14029be48]
je 0x14015bc86
lea rax, [rsi + 0x100]
lea rdi, [rsi + 0x1f0]
mov qword [r15 + 0x30], rsi
mov qword [r15 + 0x38], r13
mov rcx, 0xffffffffffffffff
mov qword [r15 + 0x40], rcx
lea rdx, str.immediate
mov qword [r15 + 0x48], rdx
mov byte [r15 + 0x50], r13b
movups xmmword [r15 + 0x58], xmm6
mov qword [r15 + 0x68], r13
mov dword [r15 + 0x78], r13d
mov qword [rsi + 0xb8], r15
movups xmmword [rsi + 0xc8], xmm6
movups xmmword [rsi + 0xd4], xmm6
movups xmmword [rsi + 0xe8], xmm6
mov qword [rsi + 0xf8], r13
mov qword [rsi + 0x100], rax
mov qword [rsi + 0x108], rax
mov qword [rsi + 0x110], r13
mov dword [rsi + 0x118], r13d
mov qword [rsi + 0x120], rcx
mov al, 1
mov byte [rsi + 0x128], al
mov byte [rsi + 0x130], r13b
movups xmmword [rsi + 0x138], xmm6
mov qword [rsi + 0x148], r13
mov byte [rsi + 0x158], r13b
movups xmmword [rsi + 0x1a0], xmm6
mov qword [rsi + 0x1b0], r13
movups xmmword [rsi + 0x189], xmm6
movups xmmword [rsi + 0x180], xmm6
movups xmmword [rsi + 0x170], xmm6
mov byte [rsi + 0x1c0], al
mov byte [rsi + 0x1c8], r13b
mov byte [rsi + 0x1e0], r13b
mov qword [rsi + 0x1e4], r13
test rbx, rbx
je 0x14015bcf2
cmp r12, qword [0x14029be48]
je 0x14015bc38
lea r15, [rbx + 0x70]
mov ecx, 0x30
call fcn.1401833f4
mov r13, rax
mov dword [rax], 1
lea rax, [0x140179590]
mov qword [r13 + 8], rax
lea r14, [0x140200e10]
mov qword [r13 + 0x10], r14
lea rax, [0x1401fa720]
mov qword [r13 + 0x18], rax
lea rax, [0x14017b890]
mov qword [r13 + 0x20], rax
mov qword [r13 + 0x28], rsi
mov r12, qword [rbx + 0x80]
test r12, r12
je 0x14015bbf3
mov rax, qword [r12 + 8]
xor rax, 0xffffffffffffffff
je 0x14015bbe9
tzcnt rbx, rax
mov rbp, qword [r12 + rbx*8 + 0x10]
mov qword [r12 + rbx*8 + 0x10], r13
test rbp, rbp
movabs r13, 0xfffffffc00000000
jne 0x14015bca3
mov r14d, 1
mov ecx, ebx
shl r14, cl
mov rax, qword [r12 + 8]
bts rax, rbx
mov qword [r12 + 8], rax
cmp rax, 0xffffffffffffffff
je 0x14015bc93
mov rax, r15
and rax, r13
cmp rax, qword [0x14029be48]
je 0x14015bc52
mov qword [rdi], r15
and r13, r12
cmp r13, qword [0x14029be48]
je 0x14015bc45
mov qword [rsi + 0x1f8], r12
mov qword [rsi + 0x200], r14
mov rcx, qword [rsp + 0x28]
mov al, byte [rcx + 4]
mov byte [rsi + 0x208], al
mov al, byte [rcx + 5]
mov byte [rsi + 0x209], al
mov al, byte [rcx + 6]
mov byte [rsi + 0x20a], al
mov ecx, 8
call fcn.1401833f4
mov dword [rax], 0
mov byte [rax + 4], 0
mov qword [rsi + 0x210], rax
test rax, rax
je 0x14015bb45
mov ecx, 1
lock xadd dword [rax], ecx
cmp ecx, 0x7fffffff
je 0x14015bda3
mov qword [rsi + 0x218], rsi
mov rax, qword [rsi + 0xb8]
cmp qword [rax + 0x10], 0
sete byte [rsi + 0x50]
cmp qword [rsi + 0xa8], 0
mov al, byte [rsi + 0x128]
jne 0x14015bb7c
test al, al
je 0x14015bceb
mov al, byte [rsi + 0x130]
xor al, 1
mov byte [rsi + 0x51], al
cmp qword [rsi + 8], 0
je 0x14015bbc3
mov rcx, qword [rsi + 0x18]
mov eax, dword [rcx + 8]
nop dword [rax]
mov edx, eax
or edx, 0x40000000
lock cmpxchg dword [rcx + 8], edx
jne 0x14015bb90
mov edx, 0x3fffffff
and eax, edx
mov r8d, eax
neg r8d
lock xadd dword [rcx + 8], r8d
test r8d, r8d
jns 0x14015bbc3
and r8d, edx
cmp r8d, eax
je 0x14015bcff
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140186020
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ebx, 0x40
jmp 0x14015ba7c
mov ecx, 0x230
call fcn.1401833f4
mov r12, rax
mov r8d, 0x230
mov rcx, rax
xor edx, edx
call fcn.140188160
lea rdx, [rsp + 0x30]
mov qword [rdx], r12
mov rcx, r15
call fcn.14001d540
mov rdx, qword [rbx + 0x78]
mov rcx, r15
call fcn.14001d450
mov r12, qword [rbx + 0x80]
jmp 0x14015ba68
mov rcx, rsi
call fcn.1400dc910
jmp 0x14015ba11
mov rcx, r12
call fcn.1400dc910
jmp 0x14015bae2
mov rcx, r15
call fcn.1400dc910
jmp 0x14015bacf
mov rcx, rsi
call fcn.1400dc910
jmp 0x14015b811
mov rcx, r14
call fcn.1400dc910
jmp 0x14015b87c
mov rcx, rsi
call fcn.1400dc910
jmp 0x14015b8b3
mov rcx, rsi
call fcn.1400dc910
jmp 0x14015b916
mov rcx, r15
mov rdx, r12
call fcn.14002fa40
jmp 0x14015babc
lock dec dword [rbp]
jne 0x14015ba99
mov rax, qword [rbp + 0x10]
cmp rax, r14
je 0x14015bcc4
mov rcx, rbp
call qword [0x1402c9008]
jmp 0x14015ba99
mov rcx, qword [rbp + 0x28]
mov rax, rcx
and rax, r13
cmp rax, qword [0x14029be48]
je 0x14015bce4
mov rcx, rbp
call fcn.1401833ec
jmp 0x14015ba99
call fcn.1400dfe50
jmp 0x14015bcd7
xor eax, eax
jmp 0x14015bb7c
mov rcx, rdi
call fcn.1402093c0
jmp 0x14015baf0
add rcx, 0x10
call fcn.140124ea0
jmp 0x14015bbc3
mov rcx, rbx
call fcn.1400dc910
jmp 0x14015b742
xor ecx, ecx
jmp 0x14015bd56
xor ecx, ecx
mov dl, 1
jmp 0x14015bd58
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.GetHandleVerifier
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14015bd1a
lea rcx, [sym.chrome.exe_GetHandleVerifier]
cmp rax, rcx
je 0x14015bd1e
call qword [0x1402c9008]
mov rcx, rax
xor edx, edx
call fcn.140014550
jmp 0x14015bd72
call fcn.1400ea220
mov r13, qword [r15 + 0x10]
cmp qword [0x1402b6720], 0
je 0x14015bd24
mov rcx, qword [0x1402b6720]
mov rax, qword [rcx]
mov rax, qword [rax]
mov rdx, r13
call qword [0x1402c9008]
mov qword [r15 + 0x10], 0
jmp 0x14015b7cc
mov byte [r15 + 0x18], 0
int3
int3
int3
int3
mov ecx, 8
call fcn.1401833f4
mov r15, rax
mov rcx, rax
call fcn.1400c0540
test r15, r15
je 0x14015bdd1
mov eax, 1
lock xadd dword [r15], eax
cmp eax, 0x7fffffff
je 0x14015bde2
mov rcx, r15
call fcn.1400c0550
mov qword [rsi + 0x10], r15
jmp 0x14015b776
int3