Function at 0x14000b090
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x14002b008]
xor rax, rsp
mov qword [rbp + 0x70], rax
call fcn.14000fbf4
call fcn.14000fbfc
call fcn.14000a820
test al, al
je 0x14000b7f1
mov qword [rsp + 0x188], r14
lea rcx, [0x14000b060]
mov r14d, 1
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14000b7f7
mov r8d, 0x1000
lea rdx, [0x140033e30]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b804
lea rdx, [0x140033e30]
lea rcx, [rbp - 0x10]
call fcn.14000a4c0
movups xmm2, xmmword [rax]
movups xmmword [0x140030dc8], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [0x140030dd8], xmm0
movups xmm1, xmmword [rax + 0x20]
movq rax, xmm2
movups xmmword [0x140030de8], xmm1
test al, al
jne 0x14000b80a
mov rax, qword [0x140030dd8]
lea rdx, [0x140033e30]
mov qword [rsp + 0x1b8], rsi
mov r8d, 0x1000
mov qword [rsp + 0x180], r15
xor ecx, ecx
xor r15d, r15d
mov qword [0x140032e28], rax
mov esi, r15d
mov qword [0x140030df8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b81d
mov qword [rsp + 0x1b0], rbx
lea rcx, [0x140033e30]
xor r8d, r8d
mov qword [rsp + 0x1c0], rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov edi, eax
lea ecx, [rax + 1]
add rcx, rcx
call fcn.14001247c
mov rbx, rax
test rax, rax
je 0x14000b823
mov r8d, edi
lea rcx, [0x140033e30]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
je 0x14000b243
mov r9, rbx
mov qword [rsp + 0x20], 0xffffffffffffffff
xor r8d, r8d
lea rcx, [rsp + 0x58]
xor edx, edx
call fcn.14001245c
test eax, eax
jne 0x14000b243
mov rcx, qword [rsp + 0x58]
call fcn.14001247c
mov rdi, rax
test rax, rax
je 0x14000b829
mov r8, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
mov r9, rbx
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rdx, rax
call fcn.14001245c
test eax, eax
je 0x14000b5e7
mov rcx, rdi
call fcn.140012004
mov rcx, rbx
call fcn.140012004
mov r9, qword [0x140030de8]
mov esi, r9d
mov rcx, qword [0x140032e28]
mov rdx, qword [0x140030df8]
movsxd r8, esi
sub r9, qword [r8 + rcx - 8]
sub r9, 8
sub r8, r9
add rcx, r9
sub r8, 8
mov qword [0x140032e28], rcx
mov qword [0x140032e18], r8
movzx eax, word [rdx + r9]
mov word [rsp + 0x50], ax
lea rax, [rdx + 3]
add rax, r9
cmp byte [rsp + 0x50], 0x4b
mov qword [0x140030df8], rax
jne 0x14000b7eb
cmp byte [rsp + 0x51], 0x41
jne 0x14000b7eb
cmp byte [rdx + r9 + 2], 0x59
jne 0x14000b7eb
mov ecx, 0x20003
call fcn.14001247c
mov qword [0x140030db0], rax
test rax, rax
je 0x14000b855
mov ecx, 0x20000
call fcn.14001247c
mov qword [0x140032e00], rax
test rax, rax
je 0x14000b855
call fcn.140005470
mov qword [0x140030da8], rax
test rax, rax
je 0x14000b855
mov qword [rsp + 0x198], r12
mov esi, 0x5c
mov qword [rsp + 0x190], r13
lea r12, [0x14002eda0]
lea r13, [0x14002cd90]
mov byte [0x140032e20], r14b
lea r14, [0x140033630]
mov edx, 2
lea rcx, [rsp + 0x50]
mov rbx, r14
lea rdi, [0x140032e30]
call fcn.14000ad90
movzx eax, word [rsp + 0x50]
mov word [0x140033630], ax
test ax, ax
je 0x14000b64d
nop dword [rax]
mov edx, 2
lea rcx, [rsp + 0x50]
lea rbx, [rbx + 2]
call fcn.14000ad90
movzx eax, word [rsp + 0x50]
mov word [rbx], ax
test ax, ax
jne 0x14000b370
cmp word [0x140033630], r15w
je 0x14000b64d
cmp word [0x140030e00], r15w
mov edx, 0x1000
mov word [0x14002eda0], r15w
mov rcx, r12
je 0x14000b3e2
lea r8, [0x140030e00]
sub r8, r12
cmp rdx, 1
jb 0x14000b841
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b3c2
mov word [rcx], r15w
mov rax, r12
cmp word [0x14002eda0], r15w
mov ecx, 0x1000
je 0x14000b417
nop dword [rax + rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b400
cmp rcx, 1
jb 0x14000b841
mov dword [rax], 0x5c
mov edx, 0x1000
cmp word [0x14002eda0], r15w
mov rax, r12
je 0x14000b43d
nop
add rax, 2
dec rdx
cmp word [rax], r15w
jne 0x14000b430
mov r8, r14
sub r8, rax
cmp rdx, 1
jb 0x14000b841
movzx ecx, word [r8 + rax]
dec rdx
mov word [rax], cx
add rax, 2
cmp word [r8 + rax], r15w
jne 0x14000b443
cmp word [0x140032e30], r15w
mov word [rax], r15w
jne 0x14000b4b4
cmp word [0x14002eda0], r15w
mov edx, 0x1000
mov rcx, rdi
je 0x14000b4b0
mov r8, r12
sub r8, rdi
nop dword [rax]
cmp rdx, 1
jb 0x14000b841
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b490
mov word [rcx], r15w
mov edx, 8
lea rcx, [rsp + 0x60]
call fcn.14000ad90
cmp word [0x14002eda0], r15w
mov edx, 0x1000
mov rdi, qword [rsp + 0x60]
mov rcx, r13
mov word [0x14002cd90], r15w
je 0x14000b510
mov r8, r12
sub r8, r13
nop dword [rax + rax]
cmp rdx, 1
jb 0x14000b841
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b4f0
mov word [rcx], r15w
mov rbx, r13
movzx eax, word [0x14002cd90]
test ax, ax
je 0x14000b548
cmp ax, 0x5c
jne 0x14000b53b
xor edx, edx
mov word [rbx], r15w
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov word [rbx], si
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x14000b523
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov edx, 0x40000000
mov rcx, r12
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14000b83b
test rdi, rdi
je 0x14000b5d9
mov ebx, 0x8000
lea rcx, [0x140035e40]
cmp rdi, rbx
cmovbe ebx, edi
movsxd rsi, ebx
mov rdx, rsi
call fcn.14000ad90
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], r15d
mov r8d, ebx
mov qword [rsp + 0x20], r15
lea rdx, [0x140035e40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000b82f
sub rdi, rsi
jne 0x14000b581
lea esi, [rdi + 0x5c]
test rdi, rdi
jne 0x14000b835
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000b334
mov rcx, rbx
call fcn.140012004
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rbp - 0x10]
mov rcx, rdi
lea rdx, str.dont_search_path
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
je 0x14000b631
mov rax, qword [rbp + 8]
test rax, rax
je 0x14000b627
cmp dword [rax + 0x84], 4
jbe 0x14000b627
mov esi, dword [rax + 0xa8]
lea rcx, [rbp - 0x10]
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, rdi
call fcn.140012004
test esi, esi
je 0x14000b24b
mov r9, qword [0x140030de8]
jmp 0x14000b255
mov rcx, qword [0x140030dd8]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [0x140030df0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140030de0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140005580
mov rcx, qword [0x140030db0]
call fcn.140012004
mov rcx, qword [0x140032e00]
call fcn.140012004
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x1400278f8]
mov edx, 0x80
mov r9d, eax
lea rcx, [rbp - 0x10]
call fcn.140001060
lea rdx, [rbp - 0x10]
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xorps xmm0, xmm0
mov dword [rbp - 0x80], 0x68
xor eax, eax
movups xmmword [rbp - 0x7c], xmm0
mov dword [rbp - 0x1c], eax
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000b847
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
mov qword [0x140030da0], rcx
mov dword [rsp + 0x54], r15d
test rcx, rcx
je 0x14000b795
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x140030da0]
lea rdx, [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, dword [rsp + 0x54]
test eax, eax
mov eax, 1
cmove ecx, eax
mov dword [rsp + 0x54], ecx
mov rcx, qword [0x140030da0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140030da0], r15
call fcn.14000af20
mov eax, dword [rsp + 0x54]
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rbx, qword [rsp + 0x1b0]
mov rdi, qword [rsp + 0x1c0]
mov rsi, qword [rsp + 0x1b8]
mov r15, qword [rsp + 0x180]
mov r14, qword [rsp + 0x188]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14000b870
add rsp, 0x1a0
pop rbp
ret
call fcn.14000acb0
int3
call fcn.14000ad60
int3
lea rcx, str.Error__failed_to_register_signal_handler.
call fcn.14000abb0
int3
call fcn.14000f6f8
int3
mov rcx, qword [0x140030dd0]
shr rax, 0x20
mov edx, eax
call fcn.14000ac30
int3
call fcn.14000f6f8
int3
call fcn.14000acf0
int3
call fcn.14000acf0
int3
call fcn.14000abf0
int3
call fcn.14000acd0
int3
call fcn.14000ad30
int3
call fcn.14000f6f8
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
call fcn.14000ad10
int3
call fcn.14000acf0
int3