Function at 0x1001fa90
Capabilities:
Check if file exists
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100d00f0
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x10104610]
xor eax, esp
mov dword [esp + 0x98], eax
push ebx
push esi
push edi
mov eax, dword [0x10104610]
xor eax, esp
push eax
lea eax, [esp + 0xb0]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov edi, 8
cmp dword [ebx + 0x14], edi
jb 0x1001fae1
mov eax, dword [ebx]
jmp 0x1001fae3
mov eax, ebx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1001fb14
cmp dword [ebx + 0x14], edi
jb 0x1001faf5
mov ebx, dword [ebx]
push ebx
push str.Application_file_path_does_not_exist:__s_n
call fcn.10006700
mov ecx, 0x100de6c0
call fcn.10006e10
add esp, 8
xor al, al
jmp 0x1001fd1c
xor eax, eax
mov word [esp + 0x70], ax
push 1
mov eax, 0x100e0604
lea esi, [esp + 0x74]
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], 0
call fcn.10001b60
mov dword [esp + 0xb8], 0
cmp dword [ebx + 0x14], edi
jb 0x1001fb55
mov edx, dword [ebx]
jmp 0x1001fb57
mov edx, ebx
mov eax, edx
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1001fb60
sub eax, esi
sar eax, 1
push eax
push edx
lea eax, [esp + 0x78]
call fcn.10001a30
push 1
push 0x100e0604
lea eax, [esp + 0x78]
call fcn.10001a30
push 1
push 0x100de608
lea eax, [esp + 0x78]
call fcn.10001a30
push 0xc
push 0x100e0608
lea eax, [esp + 0x78]
call fcn.10001a30
push ebx
mov edi, 1
call fcn.100234d0
push eax
xor ecx, ecx
lea esi, [esp + 0x90]
mov edx, ebx
call fcn.100234a0
mov byte [esp + 0xb8], 1
mov ecx, dword [esp + 0x8c]
xor esi, esi
mov dword [esp + 0x54], edi
mov edi, 8
mov dword [esp + 0x24], 0x44
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x50], 0x101
mov dword [esp + 0x5c], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], esi
cmp dword [esp + 0xa0], edi
jae 0x1001fc1c
lea ecx, [esp + 0x8c]
mov eax, dword [esp + 0x70]
cmp dword [esp + 0x84], edi
jae 0x1001fc2d
lea eax, [esp + 0x70]
lea edx, [esp + 0x14]
push edx
lea edx, [esp + 0x28]
push edx
push ecx
push esi
push 0x8000000
push 1
push esi
push esi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1001fcbb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error_Occured_trying_to_launch_exe._Error:__d
call fcn.10006700
mov ecx, 0x100de6c0
call fcn.10006e10
add esp, 8
cmp dword [esp + 0xa0], edi
jb 0x1001fc85
mov eax, dword [esp + 0x8c]
push eax
call fcn.100afa01
add esp, 4
xor ecx, ecx
mov dword [esp + 0xa0], 7
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], cx
cmp dword [esp + 0x84], edi
jb 0x1001fcb7
mov edx, dword [esp + 0x70]
push edx
call fcn.100afa01
add esp, 4
xor al, al
jmp 0x1001fd1c
mov eax, dword [esp + 0x14]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call ebx
mov ecx, dword [esp + 0x18]
push ecx
call ebx
cmp dword [esp + 0xa0], edi
jb 0x1001fce8
mov edx, dword [esp + 0x8c]
push edx
call fcn.100afa01
add esp, 4
xor eax, eax
mov dword [esp + 0xa0], 7
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], ax
cmp dword [esp + 0x84], edi
jb 0x1001fd1a
mov ecx, dword [esp + 0x70]
push ecx
call fcn.100afa01
add esp, 4
mov al, 1
mov ecx, dword [esp + 0xb0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.100afa0c
mov esp, ebp
pop ebp
ret