Function at 0x1400cbb70
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x140
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1406b92c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
movabs rax, 0xe9f19b9ceb815693
movabs rcx, 0x191aba63b9972e6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x1c25f5c69127bf7f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xf46e43db7bef9364
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x73def17761da5d15
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x53ddd05ffa11635e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xfd999a0d3e09d33
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x77f91799bf75a989
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x6996bbeb24029a0f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xddca693d43e0e4cc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xa8099d3934c9c69b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x333f9ef35da15061
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0xe9819be8ebf556fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x1c0af5e9911dbf0c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xf41d43a27b8d9305
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x73b2f11b61bb5d66
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x53f3d02cfa73633f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xff699cdd38f9d50
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x779d17f6bf07a9f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x69e5bb9f24619a7a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0xdda569504393e4e3
mov qword [rbp], rax
lea r8, [rbp + 0x20]
mov rax, qword [rbp]
lea rdx, str.open
mov qword [rbp + 0xc0], rax
xor r9d, r9d
movabs rax, 0xa8799d5134bdc6f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x333f9e8a5dc0500d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x20], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0xd8], rax
xor eax, eax
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov dword [rsp + 0x28], eax
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rsp + 0x20], rax
vzeroupper
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
setle al
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.14028f750
add rsp, 0x140
pop rbp
ret