Function at 0x140008120
Capabilities:
Check if file exists
Create process on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0xa0
lea rcx, [rsp + 0x30]
call fcn.140013970
lea rcx, [rsp + 0x40]
call fcn.140013970
mov rcx, qword [rsp + 0xb0]
add rcx, 0xb8
call fcn.14000afd0
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009ed0
mov rcx, qword [rsp + 0xb0]
add rcx, 0xc0
call fcn.14000afd0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140009ed0
mov rax, qword [rsp + 0xb0]
movzx eax, byte [rax + 0xc8]
test eax, eax
jne 0x1400081b2
lea rcx, [rsp + 0x30]
call fcn.140009f50
test eax, eax
je 0x1400081b2
lea rcx, [rsp + 0x40]
call fcn.140009f50
test eax, eax
jne 0x140008216
lea rcx, [rsp + 0x30]
call fcn.1400046c0
lea r9, [0x14002be50]
mov r8d, 0x83
mov rdx, rax
mov rcx, qword [rsp + 0xb0]
call fcn.140007fc0
test eax, eax
jne 0x1400081f6
lea rcx, [rsp + 0x40]
call fcn.140002d80
lea rcx, [rsp + 0x30]
call fcn.140002d80
jmp 0x1400085a9
lea rcx, [rsp + 0x40]
call fcn.140009f50
test eax, eax
jne 0x140008216
lea rcx, [rsp + 0x40]
call fcn.1400046c0
mov rcx, rax
call fcn.140019050
mov r9d, 0x109
mov r8d, 0x108
mov edx, 0xcd
mov rcx, qword [rsp + 0xb0]
call fcn.140007020
cmp qword [rsp + 0xb0], 0
je 0x140008255
mov rax, qword [rsp + 0xb0]
add rax, 0x50
mov qword [rsp + 0x90], rax
jmp 0x140008261
mov qword [rsp + 0x90], 0
mov rcx, qword [rsp + 0xb0]
add rcx, 0xa0
call fcn.14000afd0
mov qword [rsp + 0x98], rax
lea rcx, [rsp + 0x40]
call fcn.14000afd0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000afd0
mov rdx, rax
mov rax, qword [rsp + 0x98]
mov rax, qword [rax]
mov r9, qword [rsp + 0x90]
mov r8, rbx
mov rcx, qword [rsp + 0x98]
call qword [rax + 0x28]
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jl 0x1400083b4
cmp dword [rsp + 0x38], 0
jne 0x14000838a
lea rcx, [rsp + 0x30]
call fcn.14000afd0
mov r9, rax
mov r8d, 0x10d
mov edx, 0xcd
mov rcx, qword [rsp + 0xb0]
call fcn.1400071c0
call fcn.140019320
test eax, eax
je 0x140008388
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x4c], 0
jmp 0x14000832b
mov eax, dword [rsp + 0x4c]
add eax, 1
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0xa
jge 0x140008388
lea rcx, [rsp + 0x40]
call fcn.14000afd0
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000837b
lea rcx, [rsp + 0x40]
call fcn.14000afd0
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, [0x14002bef0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x140008388
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140008320
jmp 0x1400083af
lea rcx, [rsp + 0x30]
call fcn.14000afd0
mov r9, rax
mov r8d, pe_nt_image_headers64
mov edx, 0xcd
mov rcx, qword [rsp + 0xb0]
call fcn.1400071c0
jmp 0x140008595
cmp dword [rsp + 0x38], 0xeeee0001
jne 0x14000848c
lea rcx, [rsp + 0x50]
call fcn.140013970
mov edx, 0xef
lea rcx, [rsp + 0x30]
call fcn.140002af0
lea rdx, [0x14002befc]
lea rcx, [rsp + 0x60]
call fcn.14000be00
lea rcx, [rsp + 0x50]
call fcn.14000afd0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000afd0
lea r8, [rsp + 0x60]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c180
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000bfc0
mov rcx, rax
call fcn.14000afd0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140009ed0
lea rcx, [rsp + 0x70]
call fcn.1400040f0
lea rcx, [rsp + 0x68]
call fcn.1400040f0
lea rcx, [rsp + 0x60]
call fcn.1400040f0
lea rcx, [rsp + 0x50]
call fcn.14000afd0
mov r9, rax
mov r8d, 0xee
mov edx, 0xcd
mov rcx, qword [rsp + 0xb0]
call fcn.1400071c0
lea rcx, [rsp + 0x50]
call fcn.140002d80
jmp 0x140008595
cmp dword [rsp + 0x38], 0xeeee0002
jne 0x14000856d
lea rcx, [rsp + 0x58]
call fcn.140013970
mov edx, 0xed
lea rcx, [rsp + 0x58]
call fcn.140002af0
lea rdx, [0x14002bf04]
lea rcx, [rsp + 0x78]
call fcn.14000be00
lea rcx, [rsp + 0x58]
call fcn.14000afd0
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14000afd0
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.14000c180
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.14000bfc0
mov rcx, rax
call fcn.14000afd0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140009ed0
lea rcx, [rsp + 0x88]
call fcn.1400040f0
lea rcx, [rsp + 0x80]
call fcn.1400040f0
lea rcx, [rsp + 0x78]
call fcn.1400040f0
lea rcx, [rsp + 0x58]
call fcn.14000afd0
mov r9, rax
mov r8d, 0xee
mov edx, 0xcd
mov rcx, qword [rsp + 0xb0]
call fcn.1400071c0
lea rcx, [rsp + 0x58]
call fcn.140002d80
jmp 0x140008595
cmp dword [rsp + 0x38], 0x80004004
je 0x140008595
mov rcx, qword [rsp + 0xb0]
add rcx, 0x50
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax + 0x50]
mov edx, dword [rsp + 0x38]
call qword [rax]
lea rcx, [rsp + 0x40]
call fcn.140002d80
lea rcx, [rsp + 0x30]
call fcn.140002d80
add rsp, 0xa0
pop rbx
ret