Function at 0x140004700
Capabilities:
Create process on windows
Self delete

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x830]
sub rsp, 0x930
mov rax, qword [0x14007e018]
xor rax, rsp
mov qword [rbp + 0x820], rax
xor r12d, r12d
mov dword [rsp + 0x50], r12d
mov dword [rbp + 0x190], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x198], xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
movups xmmword [rbp + 0x1c8], xmm0
movups xmmword [rbp + 0x1d8], xmm0
movups xmmword [rbp + 0x1e8], xmm0
lea rcx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rdx, [rbp - 0x10]
lea rcx, [rbp]
call fcn.1400035e0
nop
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0xa0]
call fcn.140037230
lea rcx, [rbp + 0xa0]
call fcn.140007420
nop
lea rdx, str._bye_bye
lea rcx, [rbp + 0xa0]
call fcn.14000b480
mov rcx, rax
call fcn.14000b6f0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov dword [rsp + 0x50], 2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x118]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14000484b
mov rax, qword [rbp + 0xe8]
mov rdx, qword [rax]
test rdx, rdx
je 0x14000484b
mov rax, qword [rbp + 0xc8]
mov r9, qword [rax]
cmp rdx, qword [rbp + 0x110]
cmovb rdx, qword [rbp + 0x110]
sub rdx, r9
jmp 0x14000487c
test cl, 4
jne 0x1400048b4
mov rax, qword [rbp + 0xe0]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400048b4
mov rax, qword [rbp + 0xc0]
mov r9, qword [rax]
mov rax, qword [rbp + 0xf8]
movsxd rdx, dword [rax]
add rdx, rdx
sub rdx, r9
add rdx, rcx
mov rax, r9
sar rdx, 1
test rax, rax
je 0x1400048b4
lea rcx, [rsp + 0x58]
cmp rdx, 7
ja 0x1400048ae
mov qword [rsp + 0x68], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call fcn.140036b80
mov word [rsp + rbx + 0x58], r12w
jmp 0x1400048b4
call fcn.14000bbe0
nop
lea r8, str.___SelfDelete__
lea rdx, [rbp]
lea rcx, [rbp - 0x30]
call fcn.14000b780
nop
lea r9, [rsp + 0x58]
mov r8, rax
lea rcx, [rsp + 0x78]
call fcn.14000cc90
nop
lea r9, [rsp + 0x78]
mov rdi, qword [rsp + 0x78]
mov r14, qword [rbp - 0x70]
cmp r14, 8
cmovae r9, rdi
mov r15, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
sub rax, r15
mov rsi, qword [rbp - 0x78]
cmp rsi, rax
ja 0x140004939
lea rax, [r15 + rsi]
mov qword [rbp - 0x40], rax
lea rbx, [rbp - 0x50]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x50]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
mov rdx, r9
call fcn.140036b80
lea rax, [rsi + r15]
mov word [rbx + rax*2], r12w
jmp 0x140004953
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.14000c010
mov r14, qword [rbp - 0x70]
mov rdi, qword [rsp + 0x78]
cmp r14, 8
jb 0x14000498f
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140004986
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004cef
mov rcx, rdi
call fcn.140034c90
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400049cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004cf5
call fcn.140034c90
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140004a22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004cfb
call fcn.140034c90
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x20]
call fcn.140007ee0
nop
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae r8, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
lea r9, [r8 + rax*2]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x20]
call fcn.140009570
nop
lea rcx, [rbp + 0x20]
call fcn.140007df0
lea r15, [rbp - 0x30]
mov r14, qword [rbp - 0x30]
mov r13, qword [rbp - 0x18]
cmp r13, 0x10
cmovae r15, r14
mov edi, r12d
mov rsi, qword [rbp - 0x20]
test esi, esi
jle 0x140004ae4
nop dword [rax]
nop word [rax + rax]
mov eax, esi
sub eax, edi
mov ebx, 0x5000
cmp eax, ebx
cmovl ebx, eax
movsxd r8, ebx
movsxd rdx, edi
add rdx, r15
lea rcx, [0x1400819f0]
call fcn.140036b80
mov dword [0x1400819e8], ebx
add edi, ebx
call fcn.140001260
cmp edi, esi
jl 0x140004ab0
mov r8d, 0x104
lea rdx, [rbp + 0x200]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea r8, [rbp + 0x200]
lea rdx, str.cmd.exe__C_ping_127.0.0.1__n_5___nul__del___s_
lea rcx, [rbp + 0x410]
call fcn.14000b900
lea rax, [rbp - 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x410]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140004b6c
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13, 0x10
jb 0x140004ba4
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140004b9b
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d01
mov rcx, r14
call fcn.140034c90
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140004be4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d07
call fcn.140034c90
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r12w
mov rax, qword [rbp + 0xa0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx + 0xa0], rax
mov rax, qword [rbp + 0xa0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x9c], edx
lea rcx, [rbp + 0xa8]
call fcn.1400070d0
mov rax, qword [rbp + 0xa0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx + 0xa0], rax
mov rax, qword [rbp + 0xa0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x9c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x128]
call fcn.140014958
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140004cb9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ce9
call fcn.140034c90
mov rcx, qword [rbp + 0x820]
xor rcx, rsp
call fcn.140034c70
lea r11, [rsp + 0x930]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140041530
nop
call fcn.140041530
nop
call fcn.140041530
nop
call fcn.140041530
int3
call fcn.140041530
nop
call fcn.140041530
int3