Function at 0x140011442
Capabilities:
Create process on windows
Execute command
Self delete
Write and execute a file
Write file on windows

Disassembly:
jmp 0x140015b10
push rbp
push rdi
sub rsp, 0x888
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0x17e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140023010]
xor rax, rbp
mov qword [rbp + 0x820], rax
lea rcx, [0x1400290f2]
call fcn.140011609
lea rdx, str.SUICIDE
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b9
lea rdx, [0x14001103c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
mov r8d, 0x400
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, str.del
lea rcx, [rbp + 0x428]
call fcn.1400112ad
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x428]
call fcn.14001107d
lea rdx, str.____goto__2_nul__del___f0_
lea rcx, [rbp + 0x428]
call fcn.14001107d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [0x14001f530]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x468], rax
cmp qword [rbp + 0x468], 0xffffffffffffffff
je 0x140015c5e
lea rcx, [rbp + 0x428]
call fcn.140011483
mov qword [rbp + 0x818], rax
lea rcx, [rbp + 0x428]
call fcn.140011091
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x484]
mov rcx, qword [rbp + 0x818]
mov r8d, ecx
mov rdx, rax
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.C:Users3axap1251DesktopBISSuicideProgramx64Debug_suicide.bat
lea rcx, [rbp + 0x568]
call fcn.1400112ad
mov r8d, 0x68
xor edx, edx
lea rcx, [rbp + 0x4b0]
call fcn.1400114b5
mov dword [rbp + 0x4b0], 0x68
mov r8d, 0x18
xor edx, edx
lea rcx, [rbp + 0x538]
call fcn.1400114b5
lea rcx, [rbp + 0x568]
call fcn.140011091
lea rcx, [rbp + 0x538]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x4b0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140015d3d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateProcess_failed___d_._n
call fcn.1400112e4
mov dword [rbp + 0x7e4], 1
lea rcx, [rbp + 0x568]
call fcn.140011131
nop
lea rcx, [rbp + 0x428]
call fcn.140011131
mov eax, dword [rbp + 0x7e4]
jmp 0x140015d80
mov rcx, qword [rbp + 0x538]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x540]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x804], 0
lea rcx, [rbp + 0x568]
call fcn.140011131
nop
lea rcx, [rbp + 0x428]
call fcn.140011131
mov eax, dword [rbp + 0x804]
mov rdi, rax
lea rcx, [rbp - 0x50]
lea rdx, [0x14001f090]
call fcn.140011523
mov rax, rdi
mov rcx, qword [rbp + 0x820]
xor rcx, rbp
call fcn.140011302
lea rsp, [rbp + 0x838]
pop rdi
pop rbp
ret