Function at 0x140013920
Capabilities:
Accept command line arguments
Create process on windows
Extract resource via kernel32 functions
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
movaps xmmword [rsp + 0x100], xmm6
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0xf8], rax
call fcn.140016724
call fcn.14001672c
lea rsi, [0x14003eb10]
lea rdx, str._CACHE_DIR__COMPANY__PRODUCT__VERSION_
mov r8d, 0x1000
mov rcx, rsi
call fcn.140012e50
test al, al
je 0x14001402e
lea rcx, [0x1400138a0]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14001408b
mov edx, 0x1b
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [0x140043348], rax
mov qword [0x140040b10], rax
xor ecx, ecx
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov eax, eax
mov qword [0x140040b30], rax
mov rdx, qword [0x140040b10]
movzx r8d, byte [rdx]
movzx ecx, byte [rdx + 1]
movzx eax, byte [rdx + 2]
add rdx, 3
mov qword [0x140040b10], rdx
cmp r8b, 0x4b
jne 0x140014082
cmp cl, 0x41
jne 0x140014082
cmp al, 0x59
jne 0x140014082
mov qword [0x140040b18], 0
mov ecx, 0x20000
call fcn.14001b830
mov qword [0x140043350], rax
test rax, rax
je 0x14001409f
mov ecx, 0x274b8
call fcn.14001b830
test rax, rax
je 0x140014094
mov r8, rax
mov qword [rax + 0x73c8], 0
mov qword [rax + 0x72d8], 0
mov qword [rax + 0x7420], 0
mov qword [rax + 0x7440], 0
mov dword [rax + 0x7448], 0
mov dword [rax + 0x7454], 0
mov qword [rax + 0x274b0], 0
xorps xmm0, xmm0
movups xmmword [rax + 0x73d8], xmm0
movups xmmword [rax + 0x73ec], xmm0
movups xmmword [rax + 0x73f8], xmm0
movups xmmword [rax + 0x73a0], xmm0
mov qword [rax + 0x73b0], 0
xor r9d, r9d
xor eax, eax
xor ecx, ecx
xchg rbx, r10
cpuid
xchg rbx, r10
test eax, eax
jle 0x140013af9
cmp eax, 7
jb 0x140013af9
mov eax, 7
xor ecx, ecx
xchg rbx, r9
cpuid
xchg rbx, r9
shr r9d, 8
and r9d, 1
mov dword [r8 + 0x73d0], r9d
mov dword [r8 + 0x7388], 0
mov qword [r8 + 0x7410], 0x8000001
mov dword [r8 + 0x7458], 0
movabs rax, 0x100000000
mov qword [r8 + 0x738c], rax
mov qword [0x140043368], r8
mov rax, qword [0x140040b10]
mov qword [0x140040b18], rax
mov qword [0x140040b28], 0
mov rax, qword [0x140040b30]
mov qword [0x140040b20], rax
call fcn.140015270
lea r13, [0x140043370]
lea rdi, [rsp + 0x70]
lea rbx, [0x140041340]
lea r14, [0x140045b70]
jmp 0x140013e79
mov edx, 2
mov rcx, rdi
call fcn.140014a50
movzx eax, word [rsp + 0x70]
mov word [r12], ax
add r12, 2
test ax, ax
jne 0x140013b90
movzx eax, word [0x140043370]
test ax, ax
je 0x140013e81
mov word [0x140041340], 0
movzx edx, word [0x14003eb10]
mov rcx, rbx
test dx, dx
je 0x140013c50
xor ecx, ecx
nop word [rax + rax]
cmp rcx, 0x2000
je 0x140014029
mov word [rcx + rbx], dx
movzx edx, word [rcx + rsi + 2]
test dx, dx
je 0x140013c31
mov word [rcx + rbx + 2], dx
movzx edx, word [rcx + rsi + 4]
test dx, dx
je 0x140013c3a
mov word [rcx + rbx + 4], dx
movzx edx, word [rcx + rsi + 6]
test dx, dx
je 0x140013c43
mov word [rcx + rbx + 6], dx
movzx edx, word [rcx + rsi + 8]
add rcx, 8
test dx, dx
jne 0x140013be0
add rcx, rbx
jmp 0x140013c50
add rcx, rbx
add rcx, 2
jmp 0x140013c50
add rcx, rbx
add rcx, 4
jmp 0x140013c50
add rcx, rbx
add rcx, 6
nop word [rax + rax]
mov word [rcx], 0
cmp word [0x140041340], 0
mov rcx, rbx
je 0x140013c87
mov rdx, 0xfffffffffffff000
mov rcx, rbx
nop dword [rax]
inc rdx
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x140013c70
test rdx, rdx
je 0x140014029
mov dword [rcx], 0x5c
cmp word [0x140041340], 0
je 0x140013cb4
mov ecx, 0x1000
mov r8, rbx
nop
lea rdx, [r8 + 2]
dec rcx
cmp word [r8 + 2], 0
mov r8, rdx
jne 0x140013ca0
jmp 0x140013cbc
mov ecx, 0x1000
mov rdx, rbx
xor r8d, r8d
nop
cmp rcx, r8
je 0x140014029
mov word [rdx + r8*2], ax
movzx eax, word [r13 + r8*2 + 2]
inc r8
test ax, ax
jne 0x140013cc0
mov word [rdx + r8*2], 0
cmp word [0x140040b40], 0
jne 0x140013d7e
movzx ecx, word [0x140041340]
lea rdx, [0x140040b40]
mov rax, rdx
test cx, cx
je 0x140013d79
xor eax, eax
nop dword [rax]
cmp rax, 0x2000
je 0x140014029
mov word [rax + rdx], cx
movzx ecx, word [rax + rbx + 2]
test cx, cx
je 0x140013d60
mov word [rax + rdx + 2], cx
movzx ecx, word [rax + rbx + 4]
test cx, cx
je 0x140013d69
mov word [rax + rdx + 4], cx
movzx ecx, word [rax + rbx + 6]
test cx, cx
je 0x140013d72
mov word [rax + rdx + 6], cx
movzx ecx, word [rax + rbx + 8]
add rax, 8
test cx, cx
jne 0x140013d10
add rax, rdx
jmp 0x140013d79
add rax, rdx
add rax, 2
jmp 0x140013d79
add rax, rdx
add rax, 4
jmp 0x140013d79
add rax, rdx
add rax, 6
mov word [rax], 0
mov edx, 8
mov rcx, rdi
call fcn.140014a50
mov rbp, qword [rsp + 0x70]
mov edx, 4
mov rcx, rdi
call fcn.140014a50
mov r12d, dword [rsp + 0x70]
mov rcx, rbx
call fcn.140012d30
mov r15, 0xffffffffffffffff
cmp r12d, eax
je 0x140013dfb
mov rcx, rbx
call fcn.140014100
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov rcx, rbx
mov edx, 0x40000000
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x140014058
test rbp, rbp
jne 0x140013e15
mov r12, r13
cmp r15, 0xffffffffffffffff
jne 0x140013e70
jmp 0x140013b90
sub rbp, r12
je 0x140013e00
cmp rbp, 0x8000
mov r12d, 0x8000
cmovb r12, rbp
mov rcx, r14
mov rdx, r12
call fcn.140014a50
cmp r15, 0xffffffffffffffff
je 0x140013e10
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
mov rcx, r15
mov rdx, r14
mov r8d, r12d
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140013e10
jmp 0x14001403a
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, r13
jmp 0x140013b90
mov rcx, qword [0x140043368]
call fcn.14000a7f0
mov rcx, qword [0x140043350]
call fcn.14001b81c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x140034fb9]
lea rsi, [rsp + 0x70]
mov edx, 0x80
mov rcx, rsi
mov r9d, eax
call fcn.140013710
lea rcx, str.NUITKA_ONEFILE_PARENT
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xorps xmm6, xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0xd0], 0
mov dword [rsp + 0x70], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rsi
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
lea rcx, [0x140040b40]
mov rdx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400140b5
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
mov qword [0x14003eaf8], rcx
mov dword [rsp + 0x54], 0
test rcx, rcx
je 0x140013ff7
mov esi, 0x32
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdi, [rsp + 0x54]
mov r14, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebp, 0xffffffff
nop dword [rax]
mov edx, esi
call rbx
mov rcx, qword [0x14003eaf8]
mov rdx, rdi
call r14
test eax, eax
je 0x140013fd7
cmp dword [rsp + 0x54], 0x103
jne 0x140013fdf
call fcn.140015340
test al, al
cmovne esi, ebp
mov rcx, qword [0x14003eaf8]
test rcx, rcx
jne 0x140013fa0
jmp 0x140013ff7
mov dword [rsp + 0x54], 1
mov rcx, qword [0x14003eaf8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003eaf8], 0
mov esi, dword [rsp + 0x54]
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.140015410
mov eax, esi
movaps xmm6, xmmword [rsp + 0x100]
add rsp, 0x118
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.14001b7bc
lea rcx, str._CACHE_DIR__COMPANY__PRODUCT__VERSION_
call fcn.1400140d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Error__couldnt_unpack_file_to_target_path.
mov edx, eax
call fcn.1400137a0
mov ecx, 2
call fcn.14001a3a0
mov ecx, 2
call fcn.14001657c
lea rdx, str.Error__failed_to_open__ls_for_writing._n
lea r8, [0x140041340]
mov rcx, rax
call fcn.140013830
mov ecx, 2
call fcn.14001a3a0
lea rcx, str.Error__couldnt_find_attached_data_header.
jmp 0x1400140a6
lea rcx, str.Error__failed_to_register_signal_handler.
jmp 0x1400140a6
mov qword [0x140043368], 0
lea rcx, str.Error__couldnt_allocate_memory.
call fcn.14001bad0
mov ecx, 2
call fcn.14001a3a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Error__couldnt_launch_child
jmp 0x140014047