Function at 0x1400e29f4
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rsi, r9
movzx r14d, dl
mov r15, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
and qword [rbp - 0x30], 0
xor ebx, ebx
mov qword [rbp - 0x50], rbx
test r8b, r8b
je 0x1400e2aff
lea rcx, [rbp - 0x48]
call fcn.140176b70
mov rdi, rax
lea rax, [rbp - 0x50]
cmp rax, rdi
je 0x1400e2a60
mov rdx, qword [rdi]
lea rcx, [rbp - 0x50]
call fcn.14016d668
and qword [rdi], rbx
mov rbx, qword [rbp - 0x50]
lea rcx, [rbp - 0x48]
call fcn.14013869c
test rbx, rbx
jne 0x1400e2aec
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
call fcn.1400abd44
cmp dword [rax], 2
jbe 0x1400e2ab5
lea rcx, str.Failed_to_create_sense_sid
mov qword [rbp - 0x48], rcx
mov dword [rbp + 0x30], ebx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], rcx
lea rdx, [0x14045a754]
mov rcx, rax
call fcn.140004d64
test ebx, ebx
jle 0x1400e2ac2
movzx ebx, bx
or ebx, 0x80070000
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, vtable.sense::Common::SafeCreateProcessException.0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x10], ebx
and dword [rbp - 0xc], 0
lea rdx, [0x1404c57b8]
lea rcx, [rbp - 0x28]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
int3
mov qword [rbp - 0x48], rbx
lea r8, [rbp - 0x48]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14016ce14
mov edx, r14d
lea rcx, [rbp - 0x48]
test rsi, rsi
je 0x1400e2b46
lea r9, [rbp - 0x40]
mov r8d, edx
mov rdx, r15
call fcn.1400e26a0
mov rdx, rax
mov rdi, qword [rbp + 0x40]
mov rcx, rdi
call fcn.1400e2888
mov rcx, qword [rbp - 0x48]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400e2b79
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
nop
jmp 0x1400e2b79
lea r8, [rbp - 0x40]
call fcn.1400e2c64
mov rdx, rax
mov rdi, qword [rbp + 0x40]
mov rcx, rdi
call fcn.1400e2888
mov rcx, qword [rbp - 0x48]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400e2b79
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
nop
mov rax, qword [rdi]
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400e2c05
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
call fcn.1400abd44
cmp dword [rax], 2
jbe 0x1400e2bce
lea rcx, str.Failed_to_create_restricted_token
mov qword [rbp - 0x48], rcx
mov dword [rbp + 0x30], ebx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], rcx
lea rdx, [0x14045a754]
mov rcx, rax
call fcn.140004d64
test ebx, ebx
jle 0x1400e2bdb
movzx ebx, bx
or ebx, 0x80070000
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rax, vtable.sense::Common::SafeCreateProcessException.0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x10], ebx
and dword [rbp - 0xc], 0
lea rdx, [0x1404c57b8]
lea rcx, [rbp - 0x28]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
nop
test rbx, rbx
je 0x1400e2c27
mov qword [rbp - 0x48], rbx
mov rax, qword [sym.imp.ADVAPI32.dll_FreeSid]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x50]
call fcn.140138528
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1400e2c40
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
call fcn.14007de10
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret