Function at 0x7ff7e1aaa2d0
Capabilities:
Create process on windows
Self delete

Disassembly:
sub rsp, 0x48
lea rdx, [0x7ff7e1d5a938]
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1aaa1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d3f0
lea rdx, [0x7ff7e1d5a960]
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1aaa1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d3f0
lea rdx, [0x7ff7e1d5a988]
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1aaa1b0
nop
lea rcx, [rsp + 0x20]
call fcn.7ff7e1a9d3f0
mov ecx, 3
call qword [sym.imp.kernel32.dll_Sleep]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5a9b0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5a9d8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5a9f8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aa18]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aa40]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aa68]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aa90]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aab0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aad8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ab00]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ab18]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ab38]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ab58]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ab80]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aba0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5abc0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5abe0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ac18]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ac40]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ac68]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ac88]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5aca8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5acc8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ace0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5acf8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ad10]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ad28]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ad38]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ad60]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ad80]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ada8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5add8]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5adf0]
call qword [sym.imp.kernel32.dll_WinExec]
mov edx, 0xfa
lea rcx, [0x7ff7e1d5ae00]
call qword [sym.imp.kernel32.dll_WinExec]
mov ecx, 0x2b
call fcn.7ff7e1c8213c
int3