Function at 0x1400e6c00
Capabilities:
Check if file exists

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov rsi, rcx
mov rax, qword [0x140362028]
xor rax, rsp
mov qword [rsp + 0x108], rax
test r8, r8
je 0x1400e6dd5
mov rdi, r8
lea rbx, [r8 + 0xffff]
and rbx, 0xffffffffffff0000
cmp rbx, r8
jb 0x1400e6dd5
mov rax, rbx
shr rax, 0x1f
jne 0x1400e6dd5
mov ebp, edx
test edx, edx
je 0x1400e6fad
movabs r12, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xc0]
mov qword [rcx], r12
mov qword [rsp + 0xb0], r12
movaps xmm6, xmmword [0x140232ef0]
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
mov edx, 8
mov r8d, 2
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
je 0x1400e6dd5
lea rcx, [rsp + 0x90]
mov edx, 1
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
je 0x1400e6dd5
lea r14, [rsp + 0x90]
lea r8, [rsp + 0xc0]
mov rcx, r14
mov edx, 1
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
je 0x1400e6dd5
xorps xmm0, xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
call fcn.14019ff80
cmp eax, 5
jg 0x1400e6e0c
lea r15, [rsp + 0xe0]
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov edx, 0x20
mov rcx, r15
call fcn.1400e6fc0
movaps xmm0, xmmword [r15 + 0x10]
mov r8, qword [r15]
mov r9, qword [r15 + 8]
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.CrSharedMem__016llx_016llx_016llx_016llx
lea r15, [rsp + 0x48]
mov rcx, r15
call fcn.1400d5550
movzx eax, byte [r15 + 0x17]
test al, al
mov rcx, qword [r15]
cmovns rcx, r15
lea rdx, [rsp + 0x60]
mov qword [rdx], rcx
cmovs rax, qword [r15 + 8]
mov qword [rdx + 8], rax
lea r13, [rsp + 0xc8]
mov rcx, r13
call fcn.14019fa80
cmp byte [r15 + 0x17], 0
movups xmm0, xmmword [r13]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0x80], rax
mov byte [r13 + 0x17], 0
mov word [r13], 0
jns 0x1400e6dc2
mov rcx, qword [rsp + 0x48]
call fcn.1401a2ea8
mov al, byte [rsp + 0x87]
mov r8, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
jmp 0x1400e6e13
mov rcx, rsi
call fcn.1400c9630
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.1401a4270
mov rax, rsi
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r8d, r8d
xor ecx, ecx
xor eax, eax
lea rdx, [rsp + 0xe0]
movaps xmmword [rdx], xmm6
mov qword [rdx + 0x10], r12
mov dword [rdx], 0x18
test al, al
movzx eax, al
cmovs rax, rcx
mov qword [rdx + 8], r14
lea rcx, [rsp + 0x70]
cmovs rcx, r8
mov dword [rdx + 0x10], 0
test rax, rax
cmove rcx, rax
mov dword [rsp + 0x20], ebx
mov qword [rsp + 0x28], rcx
xor r15d, r15d
mov rcx, 0xffffffffffffffff
mov r8d, 4
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
test rax, rax
je 0x1400e6ee0
mov rbx, rax
lea r14, [rsp + 0xc8]
mov qword [r14], r12
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 7
mov rcx, rax
mov rdx, rbx
mov r8, rax
mov r9, r14
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov r14d, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14d, r14d
je 0x1400e6ee0
mov r14, qword [rsp + 0xc8]
test r14, r14
je 0x1400e6ee0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rax, [r14 + 1]
cmp rax, 2
jae 0x1400e6eed
xor r14d, r14d
jmp 0x1400e6ef2
mov rcx, rsi
call fcn.1400c9630
jmp 0x1400e6f90
call fcn.1400c5840
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400e6f11
mov rcx, rsi
call fcn.1400c9630
jmp 0x1400e6f79
lea r15, [rsp + 0xc8]
mov rcx, r15
call fcn.14019fe90
mov qword [rsp + 0x40], 0
test r14, r14
je 0x1400e6f5e
cmp r14, 0xffffffffffffffff
jne 0x1400e6f3f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400e6f56
call fcn.1400c5840
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov qword [rsp + 0x40], r14
call fcn.1400c5840
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x40]
mov rcx, rsi
mov r8d, ebp
mov r9, rdi
call fcn.1400e68d0
xor r14d, r14d
lea rax, [r14 + 1]
cmp rax, 2
jb 0x1400e6f90
call fcn.1400c5840
mov rcx, r14
call fcn.1400e21b0
cmp byte [rsp + 0x87], 0
jns 0x1400e6ddd
mov rcx, qword [rsp + 0x70]
call fcn.1401a2ea8
jmp 0x1400e6ddd
int3