Function at 0x1400ce0b0
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x140
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1406e22c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
movabs rax, 0xfcefaf5c21db170b
movabs rcx, 0x87195e7b5215d5d6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x2d1a7b36c65aae1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x436a7f8be5cd8454
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x9fb1b12fb333f0bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x98a1cd0f247ee776
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x58f690b0e78e3ed3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x4e89c32972ae13e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x573e7b73b30883c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x39d64e6d146aeca4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x21f0c792444cfbb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x2ec01813ee6858d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xfc9faf2821af1763
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x2d357b19c660ae6c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x43197ff2e5af8435
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x9fddb143b352f0ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x988fcd7c241ce717
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x58d990dde7e13eb0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x4eedc34672dc1399
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x574d7b07b36b83b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x39b94e001419ec8b
mov qword [rbp], rax
lea r8, [rbp + 0x20]
mov rax, qword [rbp]
lea rdx, str.open
mov qword [rbp + 0xc0], rax
xor r9d, r9d
movabs rax, 0x26f0c112430cfd4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x2ec0186aee0958bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x20], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0xd8], rax
xor eax, eax
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov dword [rsp + 0x28], eax
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rsp + 0x20], rax
vzeroupper
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
setle al
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.140297700
add rsp, 0x140
pop rbp
ret