Function at 0x1400cddb0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0xaa8]
sub rsp, 0xb90
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1403b8c08]
xor rax, rsp
mov qword [rbp + 0xa80], rax
mov r14, rcx
cmp dword [rcx + 0x4bc], 0
je 0x1400ce2f6
call fcn.140089380
mov rcx, qword [rax + 8]
sub rcx, 0x18
call fcn.14000ae30
lea rdi, [rax + 0x18]
mov qword [rsp + 0x58], rdi
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400cdffa
lea rcx, [rbp - 0x20]
call fcn.1400995f0
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce338
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [0x1402ec198]
mov rsi, 0xffffffffffffffff
cmp rdx, 0x10000
jae 0x1400cde78
movzx edx, dx
lea rcx, [rsp + 0x30]
call fcn.14000b690
jmp 0x1400cde98
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400cde80
mov r8d, eax
lea rcx, [rsp + 0x30]
call fcn.140010860
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce343
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x28], rax
lea rdx, [0x140305610]
cmp rdx, 0x10000
jae 0x1400cded7
movzx edx, dx
lea rcx, [rsp + 0x28]
call fcn.14000b690
jmp 0x1400cdef8
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400cdee0
mov r8d, eax
lea rcx, [rsp + 0x28]
call fcn.140010860
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce34e
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x20], rax
lea rdx, [0x140305620]
cmp rdx, 0x10000
jae 0x1400cdf37
movzx edx, dx
lea rcx, [rsp + 0x20]
call fcn.14000b690
jmp 0x1400cdf58
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400cdf40
mov r8d, eax
lea rcx, [rsp + 0x20]
call fcn.140010860
nop
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x20]
call fcn.14009a150
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cdf90
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cdfaf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400cdfcd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, 3
lea rcx, [rbp - 0x20]
call fcn.14009a1b0
xor r8d, r8d
mov rdx, qword [r14 + 8]
lea rcx, [rbp - 0x20]
call fcn.14009a1e0
nop
lea rcx, [rbp - 0x20]
call fcn.140099760
jmp 0x1400ce2da
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce359
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1400ce042
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.14000bdf0
mov rbx, qword [rsp + 0x50]
mov r8d, 0x104
mov rdx, rbx
mov rcx, rdi
call fcn.1400e43e0
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call fcn.14028c900
test eax, eax
js 0x1400ce32d
cmp eax, dword [rbx - 0xc]
jg 0x1400ce32d
mov dword [rbx - 0x10], eax
cdqe
xor r15d, r15d
mov word [rbx + rax*2], r15w
mov rdx, qword [r14 + 0x4a8]
test rdx, rdx
je 0x1400ce364
mov rcx, rbx
call fcn.140299718
lea rsi, [r15 - 1]
test eax, eax
je 0x1400ce278
lea rcx, [rbp + 0x530]
call fcn.1400995f0
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce36f
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [0x1402ec198]
cmp rdx, 0x10000
jae 0x1400ce0ed
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.14000b690
jmp 0x1400ce108
mov rax, rsi
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400ce0f0
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140010860
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce37a
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rdx, [0x140305630]
cmp rdx, 0x10000
jae 0x1400ce147
movzx edx, dx
lea rcx, [rsp + 0x40]
call fcn.14000b690
jmp 0x1400ce168
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400ce150
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140010860
nop
call fcn.14000b190
mov rcx, rax
test rax, rax
je 0x1400ce322
mov rax, qword [rax]
call qword [rax + SafeArrayCopy]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [0x140305620]
cmp rdx, 0x10000
jae 0x1400ce1a7
movzx edx, dx
lea rcx, [rsp + 0x38]
call fcn.14000b690
jmp 0x1400ce1c8
mov rax, rsi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400ce1b0
mov r8d, eax
lea rcx, [rsp + 0x38]
call fcn.140010860
nop
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x530]
call fcn.14009a150
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce203
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce222
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce240
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, 3
lea rcx, [rbp + 0x530]
call fcn.14009a1b0
xor r8d, r8d
mov rdx, qword [r14 + 8]
lea rcx, [rbp + 0x530]
call fcn.14009a1e0
nop
lea rcx, [rbp + 0x530]
call fcn.140099760
mov rbx, qword [rsp + 0x50]
jmp 0x1400ce2c0
xor edx, edx
lea r8d, [rdx + 0x70]
lea rcx, [rsp + 0x70]
call fcn.140289490
mov dword [rsp + reloc.WS2_32.dll_WSASetLastError], 0x70
mov qword [rbp - 0x78], rdi
mov dword [rbp - 0x60], 1
mov dword [rsp + 0x74], 0x440
mov qword [rbp - 0x70], r15
lea rcx, [rsp + 0x70]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov r8b, 1
xor edx, edx
mov rcx, r14
call fcn.1400f64f0
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ce2da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400ce2f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0xa80]
xor rcx, rsp
call fcn.140172190
lea r11, [rsp + 0xb90]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80070057
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
nop
mov ecx, 0x80004005
call fcn.14000adf0
int3