Function at 0x1400dcf34
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rsi, r9
movzx r14d, dl
mov r15, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
and qword [rbp - 0x30], 0
xor ebx, ebx
mov qword [rbp - 0x50], rbx
test r8b, r8b
je 0x1400dd03f
lea rcx, [rbp - 0x48]
call fcn.140175a80
mov rdi, rax
lea rax, [rbp - 0x50]
cmp rax, rdi
je 0x1400dcfa0
mov rdx, qword [rdi]
lea rcx, [rbp - 0x50]
call fcn.14016c578
and qword [rdi], rbx
mov rbx, qword [rbp - 0x50]
lea rcx, [rbp - 0x48]
call fcn.14013755c
test rbx, rbx
jne 0x1400dd02c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
call fcn.1400abad4
cmp dword [rax], 2
jbe 0x1400dcff5
lea rcx, str.Failed_to_create_sense_sid
mov qword [rbp - 0x48], rcx
mov dword [rbp + 0x30], ebx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], rcx
lea rdx, [0x14045cf4c]
mov rcx, rax
call fcn.140004d64
test ebx, ebx
jle 0x1400dd002
movzx ebx, bx
or ebx, 0x80070000
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, vtable.sense::Common::SafeCreateProcessException.0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x10], ebx
and dword [rbp - 0xc], 0
lea rdx, [0x1404c86d0]
lea rcx, [rbp - 0x28]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
int3
mov qword [rbp - 0x48], rbx
lea r8, [rbp - 0x48]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14016bd24
mov edx, r14d
lea rcx, [rbp - 0x48]
test rsi, rsi
je 0x1400dd086
lea r9, [rbp - 0x40]
mov r8d, edx
mov rdx, r15
call fcn.1400dcbe0
mov rdx, rax
mov rdi, qword [rbp + 0x40]
mov rcx, rdi
call fcn.1400dcdc8
mov rcx, qword [rbp - 0x48]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400dd0b9
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
nop
jmp 0x1400dd0b9
lea r8, [rbp - 0x40]
call fcn.1400dd1a4
mov rdx, rax
mov rdi, qword [rbp + 0x40]
mov rcx, rdi
call fcn.1400dcdc8
mov rcx, qword [rbp - 0x48]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400dd0b9
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
nop
mov rax, qword [rdi]
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400dd145
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
call fcn.1400abad4
cmp dword [rax], 2
jbe 0x1400dd10e
lea rcx, str.Failed_to_create_restricted_token
mov qword [rbp - 0x48], rcx
mov dword [rbp + 0x30], ebx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], rcx
lea rdx, [0x14045cf4c]
mov rcx, rax
call fcn.140004d64
test ebx, ebx
jle 0x1400dd11b
movzx ebx, bx
or ebx, 0x80070000
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, vtable.sense::Common::SafeCreateProcessException.0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x10], ebx
and dword [rbp - 0xc], 0
lea rdx, [0x1404c86d0]
lea rcx, [rbp - 0x28]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
nop
test rbx, rbx
je 0x1400dd167
mov qword [rbp - 0x48], rbx
mov rax, qword [sym.imp.ADVAPI32.dll_FreeSid]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x50]
call fcn.1401373e8
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1400dd180
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
call fcn.14007e0f0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret