Function at 0x14001abf0
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov r14, r9
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov rax, qword [0x140196028]
xor rax, rsp
mov qword [rsp + 0x2d8], rax
movaps xmm6, xmmword [0x14016f5f0]
lea rcx, [rsp + 0xc0]
movaps xmmword [rcx], xmm6
xor edx, edx
call fcn.140032880
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001aed6
mov qword [rsp + 0x48], rsi
mov ebp, dword [rsp + 0x380]
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea r15, [rsp + 0x50]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bc06c
mov r13, rax
lea rdx, [0x14001b910]
lea r8, [0x14001b920]
mov rcx, rax
call fcn.140085d20
lea rbx, [rsp + 0x290]
mov qword [rbx], r13
mov rcx, r15
mov rdx, rbx
call fcn.140085e20
lea r15, [rsp + 0xd0]
mov rcx, r15
mov edx, ebp
mov r8d, 0x40
call fcn.140114d10
lea r13, [rsp + 0xc0]
mov rcx, r13
mov rdx, r15
call fcn.140032930
mov rcx, r15
call fcn.140032900
mov rcx, r13
call fcn.1400823b0
test al, al
jne 0x14001ad21
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001aede
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x50]
call fcn.140085e50
test r15d, r15d
jns 0x14001ad2b
jmp 0x14001b193
lea rcx, [rsp + 0x50]
call fcn.140085e50
mov r15, qword [rsp + 0x370]
lea rcx, [rsp + 0xa0]
mov qword [rcx + 0x10], rsi
movaps xmmword [rcx], xmm6
call fcn.1401158b0
lea r13, [rsp + 0x270]
mov qword [r13 + 0x10], rsi
movaps xmmword [r13], xmm6
mov rcx, r13
call fcn.1401158b0
mov rcx, r13
mov rdx, r15
call fcn.1401159d0
test al, al
jne 0x14001ada4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
jne 0x14001af3b
lea rcx, [rsp + 0x270]
call fcn.1401159a0
mov r15d, 0x80004005
jmp 0x14001b186
lea r15, [rsp + 0x250]
mov qword [r15 + 0x10], rsi
movaps xmmword [r15], xmm6
lea rcx, [rsp + 0x270]
call fcn.1400ef9c0
lea rcx, str.ChromeRecoveryCRX.crx
lea r8, [rsp + 0x240]
mov qword [r8], rcx
mov qword [r8 + 8], 0x15
mov rcx, rax
mov rdx, r15
call fcn.140087610
lea rcx, [rsp + 0x228]
mov rdx, r12
call fcn.140085ed0
lea rcx, [rsp + 0xd0]
movaps xmmword [rcx + 0x20], xmm6
movaps xmmword [rcx + 0x10], xmm6
movaps xmmword [rcx], xmm6
call fcn.140039910
call qword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x14001af08
lea r15, [rsp + 0x290]
mov qword [r15], rsi
mov ecx, 0x28
call fcn.1400bc06c
mov r12, rax
lea rdx, [0x14001b910]
lea r8, [0x14001b920]
mov rcx, rax
call fcn.140085d20
lea rdx, [rsp + 0x210]
mov qword [rdx], r12
mov rcx, r15
call fcn.140085e20
lea r15, [rsp + 0xd0]
lea rdx, [rsp + 0x228]
mov rcx, r15
mov r8d, 0x80021
call fcn.1400399a0
mov rcx, r15
call fcn.1400823f0
test al, al
je 0x14001b1d7
lea rcx, [rsp + 0xd0]
call fcn.140033480
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov r15d, 0x80070057
cmp eax, 1
jne 0x14001aef9
lea rcx, [rsp + 0xd0]
call fcn.1400335c0
dec rax
cmp rax, 0x98967e
ja 0x14001aef9
lea rcx, [rsp + 0x290]
call fcn.140085e50
jmp 0x14001b20c
mov r15d, eax
jmp 0x14001b193
lea rcx, [rsp + 0x50]
call fcn.140085e50
mov r15d, 0x80004005
jmp 0x14001b193
mov r15d, 0x80004005
lea rcx, [rsp + 0x290]
call fcn.140085e50
jmp 0x14001af0b
mov r15d, eax
lea rcx, [rsp + 0xd0]
call fcn.140088410
lea rcx, [rsp + 0x228]
call fcn.140086130
test r15d, r15d
jns 0x14001b3da
lea rcx, [rsp + 0x250]
call fcn.140086130
lea rcx, [rsp + 0x270]
call fcn.1401159a0
test r15d, r15d
js 0x14001b186
mov rdi, qword [rsp + 0x378]
lea rbx, [rsp + 0x290]
mov qword [rbx + 0x10], rsi
movaps xmmword [rbx], xmm6
lea rcx, [rsp + 0xa0]
call fcn.1400ef9c0
mov rcx, rax
mov rdx, rbx
mov r8, rdi
call fcn.140039350
lea rdi, [rsp + 0x50]
movaps xmmword [rdi + 0x40], xmm6
movaps xmmword [rdi + 0x30], xmm6
movaps xmmword [rdi + 0x20], xmm6
movaps xmmword [rdi + 0x10], xmm6
movaps xmmword [rdi], xmm6
mov rcx, rdi
mov rdx, rbx
call fcn.140039b00
xor ebp, ebp
mov rcx, rdi
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
call fcn.1401173a0
lea rsi, [rsp + 0xd0]
mov r8d, 0x98
mov rcx, rsi
mov dl, 0xaa
call fcn.1400bf710
mov rcx, rsi
call fcn.1400361f0
mov byte [rsi + 0x22], 1
lea rcx, [rsp + 0xd8]
call fcn.140034260
lea rbx, [rsp + 0x270]
movaps xmmword [rbx], xmm6
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140032a60
mov rcx, rbx
call fcn.1400823b0
test al, al
je 0x14001b0a5
lea rsi, [rsp + 0x250]
mov qword [rsi], 0
lea rcx, [rsp + 0xc0]
call fcn.1400823d0
mov rdi, rax
lea rcx, [rsp + 0x270]
call fcn.1400823d0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0x101000
mov rcx, rax
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14001b0a5
mov rsi, qword [rsp + 0x250]
test rsi, rsi
je 0x14001b09e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor r15d, r15d
cmp rsi, 0xffffffffffffffff
je 0x14001b6be
call fcn.140085d10
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14001b0c5
xor esi, esi
xor r15d, r15d
jmp 0x14001b0c5
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
xor esi, esi
lea rcx, [rsp + 0x270]
call fcn.140032900
lea rcx, [rsp + 0xd0]
call fcn.140036260
test r15d, r15d
js 0x14001b158
mov rbx, qword [rsp + 0x388]
lea rcx, [rsp + 0xa0]
lea rdi, [rsp + 0xd0]
mov rdx, rdi
call fcn.1401158c0
mov rcx, rdi
call fcn.14001b720
mov rcx, rdi
call fcn.140086130
lea r14, [rsi + 1]
cmp r14, 2
jb 0x14001b123
call fcn.140085d10
cmp qword [rbx], rsi
je 0x14001b156
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [rbx]
inc rax
cmp rax, 2
jae 0x14001b6c5
cmp r14, 2
jb 0x14001b14e
mov qword [rbx], rsi
call fcn.140085d10
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14001b16f
call fcn.140085d10
mov rcx, rsi
call fcn.1400820d0
lea rcx, [rsp + 0x50]
call fcn.140039fe0
lea rcx, [rsp + 0x290]
call fcn.140086130
lea rcx, [rsp + 0xa0]
call fcn.1401159a0
lea rcx, [rsp + 0xc0]
call fcn.140032900
mov rcx, qword [rsp + 0x2d8]
xor rcx, rsp
call fcn.1400bd5c0
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14001aef3
movzx r15d, ax
or r15d, 0x80070000
test eax, eax
cmovle r15d, eax
lea rcx, [rsp + 0x290]
call fcn.140085e50
test r15d, r15d
js 0x14001af0b
lea r15, [rsp + 0x290]
movaps xmmword [r15 + 0x20], xmm6
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, r15
call fcn.140039910
lea rdx, [rsp + 0x250]
mov rcx, r15
mov r8d, 0x80048
call fcn.1400399a0
mov rcx, r15
call fcn.1400823f0
test al, al
jne 0x14001b27c
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
lea rcx, [rsp + 0x290]
call fcn.140088410
jmp 0x14001af0b
mov ecx, 0x10000
call fcn.1400bc06c
mov r12, rax
lea rdx, [rax + 0x10000]
neg rax
xor ecx, ecx
cmp rax, rcx
je 0x14001b6de
mov byte [r12 + rcx], 0
inc rcx
cmp rcx, 0x10000
jne 0x14001b295
mov qword [rsp + 0x40], rdx
xor r13d, r13d
lea r15, [rsp + 0xd0]
mov rcx, r15
mov rdx, r12
mov r8d, 0x10000
call fcn.140082540
test eax, eax
js 0x14001b316
je 0x14001b311
mov ebp, eax
mov eax, eax
add r13, rax
cmp r13, 0x989680
ja 0x14001b309
lea rcx, [rsp + 0x290]
mov rdx, r12
mov r8d, ebp
call fcn.140033490
test eax, eax
js 0x14001b316
cmp eax, ebp
je 0x14001b2bf
mov r15d, 0x8000ffff
jmp 0x14001b334
mov r15d, 0x80070057
jmp 0x14001b334
xor r15d, r15d
jmp 0x14001b334
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov r15d, 0x80004005
cmovne r15d, ecx
test r12, r12
je 0x14001b26a
mov rax, qword [rsp + 0x40]
dec rax
cmp rax, 0xffff
ja 0x14001b6a3
lea rax, str.null_pointer_given_to_destroy_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__loc___nullptr
mov r8d, 0x41
call fcn.1400f3900
mov rax, qword [rsp + 0x2c8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b351
jmp 0x14001b67f
js 0x14001b70a
mov rcx, r14
call fcn.1400bc06c
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x2c8], rax
lea r12, [rax + r14]
mov qword [rsp + 0x2d0], r12
mov rcx, rax
mov rdx, r15
mov r8, r14
call fcn.1400bf060
mov qword [rsp + 0x2c8], r12
jmp 0x14001b41f
xorps xmm7, xmm7
movaps xmmword [rsp + 0x290], xmm7
xor eax, eax
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0xe0], rax
movaps xmmword [rsp + 0xd0], xmm7
mov qword [rsp + 0x2d0], rax
movaps xmmword [rsp + 0x2c0], xmm7
mov r15, qword [r14]
mov r14, qword [r14 + 8]
sub r14, r15
jne 0x14001b398
mov ecx, 0x18
call fcn.1400bc06c
lea r14, [rsp + 0x228]
mov qword [r14 - 0x18], rax
mov qword [r14 - 0x10], rax
lea rcx, [rax + 0x18]
mov qword [r14 - 8], rcx
lea r8, [rsp + 0x2d8]
lea rdx, [rsp + 0x2c0]
mov rcx, r14
mov r9, rax
call fcn.1400f0960
mov qword [r14 - 0x10], rax
movups xmmword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x250]
lea rbx, [rsp + 0x210]
lea r9, [rsp + 0xd0]
mov rdx, rdi
mov r8, rbx
call fcn.14003df70
mov edi, eax
mov rbx, qword [rbx]
test rbx, rbx
jne 0x14001b502
mov rcx, qword [rsp + 0x2c0]
test rcx, rcx
jne 0x14001b37d
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
jne 0x14001b4e3
mov r15d, 0x80092009
test edi, edi
je 0x14001b568
cmp byte [rsp + 0x2a7], 0
jns 0x14001af2e
mov rcx, qword [rsp + 0x290]
call fcn.1400bc0a8
jmp 0x14001af2e
mov rax, qword [rsp + 0xd8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b351
jmp 0x14001b691
mov r14, qword [rsp + 0x218]
mov rcx, rbx
cmp r14, rbx
je 0x14001b53b
add r14, 0xffffffffffffffe8
test r14, r14
je 0x14001b351
mov rcx, qword [r14]
test rcx, rcx
jne 0x14001b54d
lea rax, [r14 - 0x18]
cmp r14, rbx
mov r14, rax
jne 0x14001b516
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x218], rbx
call fcn.1400bc0a8
jmp 0x14001b497
mov rax, qword [r14 + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001b351
jmp 0x14001b6b0
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movaps xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
movups xmmword [rdi + 0x18], xmm0
movups xmmword [rdi + 0x28], xmm0
mov qword [rdi + 0x38], rax
mov byte [rdi + 0x40], 0
lea rcx, [rsp + 0x270]
call fcn.1400ef9c0
lea rcx, [rsp + 0x250]
mov rdx, rax
mov r8, rdi
call fcn.14003f440
mov r15d, 0x8000ffff
test al, al
je 0x14001b4c3
mov ecx, 1
call fcn.140084af0
test al, al
je 0x14001b601
lea rcx, [rsp + 0x250]
call fcn.140033cc0
test al, al
jne 0x14001b601
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xbe
mov r9d, 1
call fcn.140037740
mov rcx, rdi
call fcn.140037c70
mov ecx, 1
call fcn.140084af0
xor r15d, r15d
test al, al
je 0x14001b4c3
lea rcx, [rsp + 0x270]
lea rdi, [rsp + 0x210]
mov rdx, rdi
call fcn.1401158c0
lea rcx, [rsp + 0xa0]
mov rdx, rdi
call fcn.140115a60
test al, al
jne 0x14001b66d
lea rdx, str.....chromeelevation_serviceelevated_recovery_impl.cc
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8d, 0xc0
mov r9d, 1
call fcn.140037740
mov rcx, rdi
call fcn.140037c70
lea rcx, [rsp + 0x210]
call fcn.140086130
jmp 0x14001b4c3
mov qword [rsp + 0x2c8], rcx
call fcn.1400bc0a8
jmp 0x14001b4a8
mov qword [rsp + 0xd8], rcx
call fcn.1400bc0a8
jmp 0x14001b4b5
mov rcx, r12
call fcn.1400bc0a8
jmp 0x14001b26a
mov qword [r14 + 8], rcx
call fcn.1400bc0a8
jmp 0x14001b527
xor esi, esi
jmp 0x14001b094
call fcn.140085d10
mov rcx, qword [rbx]
call fcn.1400820d0
mov qword [rbx], 0
jmp 0x14001b140
lea rax, str.null_pointer_given_to_construct_at
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s_n
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h
lea r9, str.__location___nullptr
mov r8d, 0x25
call fcn.1400f3900
lea rcx, [rsp + 0x2c0]
call fcn.1400f0940
int3