Function at 0x1400ce380
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
sub rsp, 0x180
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1406e22c0]
xor rax, rsp
mov qword [rbp + 0x120], rax
lea rax, [rbp + 0x60]
mov qword [rbp], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xor ebx, ebx
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], rbx
xor r8d, r8d
lea rdx, [0x140502112]
lea rcx, [rbp + 0x60]
call fcn.140005c10
nop
lea rax, [rbp + 0x80]
mov qword [rbp + 0xc0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], rbx
xor r8d, r8d
lea rdx, [0x140502112]
lea rcx, [rbp + 0x80]
call fcn.140005c10
nop
lea rax, [rbp + 0xa0]
mov qword [rbp + 0xc8], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rbx
lea r8d, [rbx + 4]
lea rdx, [0x140502108]
lea rcx, [rbp + 0xa0]
call fcn.140005c10
nop
lea rax, [rbp + 0xe0]
mov qword [rbp + 0xd0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], rbx
lea r8d, [rbx + 7]
lea rdx, str.discord
lea rcx, [rbp + 0xe0]
call fcn.140005c10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rbx
lea r8d, [rbx + 0xd]
lea rdx, str.settings.json
lea rcx, [rbp + 0x20]
call fcn.140005c10
nop
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x20]
call fcn.1400cb980
movabs rax, 0xfcefaf5c21db170b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x2d1a7b36c65aae1f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x437a7f81e5c68451
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x9ff3b127b320f0a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x98e8cd53247be770
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x58a990ade7d83ee4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x4edec324729d13a0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x574d7b07b36b83eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xfc9faf2821af1763
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x2d357b19c660ae6c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x43197ff2e5af8435
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x9fddb143b352f0ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x988fcd7c241ce717
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x58d990dde7e13eb0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x4eedc34672dc1399
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x574d7b07b36b83b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x40], ymm1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, str.open
xor ecx, ecx
vzeroupper
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
setle al
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140297700
mov rbx, qword [rsp + 0x190]
add rsp, 0x180
pop rbp
ret