Function at 0x1400cb780
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x140
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1406b82c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
movabs rax, 0x5e586aee0d7ce803
movabs rcx, 0x160d3a258af58e3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x292e30885edde583
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xd82ef72998572ec4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xf0a406215485a061
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x390381d87c4d4de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x2cea7f96eb70ec77
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xefa07ceb150d1b69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x2f77d185cbbe9873
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xe2bf6effee8334bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x950183370b78e697
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x3cb37431f5b4a1a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x5e286a9a0d08e86b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x290130a75ee7e5f0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xd85df75098352ea5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0xf0c8064d54e4a012
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x3be386e87a6d4bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x2cc57ffbeb1fec14
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xefc47c84157f1b19
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x2f04d1f1cbdd9806
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xe2d06e92eef03493
mov qword [rbp], rax
lea r8, [rbp + 0x20]
mov rax, qword [rbp]
lea rdx, str.open
mov qword [rbp + 0xc0], rax
xor r9d, r9d
movabs rax, 0x9571835f0b0ce6f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x3cb37448f5d5a1cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x20], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0xd8], rax
xor eax, eax
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov dword [rsp + 0x28], eax
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rsp + 0x20], rax
vzeroupper
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
setle al
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14028f2f0
add rsp, 0x140
pop rbp
ret