Function at 0x14000ae10
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Encode data using xor
Hash data with crc32
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x14002b008]
xor rax, rsp
mov qword [rbp + 0xb0], rax
call fcn.14000fce4
call fcn.14000fcec
call fcn.14000a690
test al, al
je 0x14000b69f
mov qword [rsp + 0x1c8], r14
lea rcx, [0x14000adb0]
mov r14d, 1
mov edx, r14d
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14000b6a5
mov r8d, 0x1000
lea rdx, [0x140033e20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b6b2
lea rdx, [0x140033e20]
lea rcx, [rsp + 0x70]
call fcn.14000a330
movups xmm2, xmmword [rax]
movups xmmword [0x140030db8], xmm2
movups xmm0, xmmword [rax + 0x10]
movups xmmword [0x140030dc8], xmm0
movups xmm1, xmmword [rax + 0x20]
movq rax, xmm2
movups xmmword [0x140030dd8], xmm1
test al, al
jne 0x14000b6b8
mov rax, qword [0x140030dc8]
lea rdx, [0x140033e20]
mov qword [rsp + 0x1f8], rsi
mov r8d, 0x1000
mov qword [rsp + 0x1c0], r15
xor ecx, ecx
xor r15d, r15d
mov qword [0x140032e10], rax
mov esi, r15d
mov qword [0x140030de8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b6cb
mov qword [rsp + 0x1f0], rbx
lea rcx, [0x140033e20]
xor r8d, r8d
mov qword [rsp + 0x200], rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov ebx, eax
lea ecx, [rax + 1]
add rcx, rcx
call fcn.14001256c
mov rdi, rax
test rax, rax
je 0x14000b6d1
mov r8d, ebx
lea rcx, [0x140033e20]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
je 0x14000afc3
mov r9, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
xor r8d, r8d
lea rcx, [rsp + 0x58]
xor edx, edx
call fcn.14001254c
test eax, eax
jne 0x14000afc3
mov rcx, qword [rsp + 0x58]
call fcn.14001256c
mov rbx, rax
test rax, rax
je 0x14000b6d7
mov r8, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
mov r9, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rdx, rax
call fcn.14001254c
test eax, eax
je 0x14000afc6
mov rcx, rbx
call fcn.1400120f4
mov rbx, r15
mov rcx, rdi
call fcn.1400120f4
test rbx, rbx
je 0x14000b02a
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rbp + 0x30]
mov rcx, rbx
lea rdx, str.dont_search_path
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
je 0x14000b015
mov rax, qword [rbp + 0x48]
test rax, rax
je 0x14000b00b
cmp dword [rax + 0x84], 4
jbe 0x14000b00b
mov esi, dword [rax + 0xa8]
lea rcx, [rbp + 0x30]
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, rbx
call fcn.1400120f4
test esi, esi
je 0x14000b02a
mov r8, qword [0x140030dd8]
jmp 0x14000b034
mov r8, qword [0x140030dd8]
mov esi, r8d
mov rax, qword [0x140030de8]
mov rcx, qword [0x140032e10]
movsxd rdx, esi
sub r8, qword [rdx + rcx - 8]
sub r8, 8
sub rdx, r8
add rcx, r8
sub rdx, 8
mov qword [0x140032e10], rcx
mov qword [0x140032e08], rdx
movzx ecx, word [rax + r8]
movzx edx, byte [rax + r8 + 2]
add rax, 3
add rax, r8
mov word [rsp + 0x50], cx
mov qword [0x140030de8], rax
cmp cl, 0x4b
jne 0x14000b699
cmp byte [rsp + 0x51], 0x41
jne 0x14000b699
cmp dl, 0x59
jne 0x14000b699
mov ecx, 0x20003
call fcn.14001256c
mov qword [0x140030da0], rax
test rax, rax
je 0x14000b703
mov ecx, 0x20000
call fcn.14001256c
mov qword [0x140032df0], rax
test rax, rax
je 0x14000b703
call fcn.1400052d0
mov qword [0x140030d98], rax
test rax, rax
je 0x14000b703
mov qword [rsp + 0x1d8], r12
lea r12, [0x14002ed90]
mov qword [rsp + 0x1d0], r13
lea r13, [0x14002cd80]
lea rdi, [0x140032e20]
nop
mov esi, 0x5c
lea rcx, [rsp + 0x50]
lea rbx, [0x140033620]
lea edx, [rsi - 0x5a]
call fcn.14000abd0
movzx eax, word [rsp + 0x50]
mov word [0x140033620], ax
test ax, ax
je 0x14000b4ff
nop
mov edx, 2
lea rcx, [rsp + 0x50]
lea rbx, [rbx + 2]
call fcn.14000abd0
movzx eax, word [rsp + 0x50]
mov word [rbx], ax
test ax, ax
jne 0x14000b140
cmp word [0x140033620], r15w
je 0x14000b4ff
cmp word [0x140030df0], r15w
mov edx, 0x1000
mov word [0x14002ed90], r15w
mov rcx, r12
je 0x14000b1b2
lea r8, [0x140030df0]
sub r8, r12
cmp rdx, 1
jb 0x14000b6ef
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b192
mov word [rcx], r15w
mov rax, r12
cmp word [0x14002ed90], r15w
mov ecx, 0x1000
je 0x14000b1e7
nop dword [rax + rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b1d0
cmp rcx, 1
jb 0x14000b6ef
mov dword [rax], 0x5c
mov edx, 0x1000
cmp word [0x14002ed90], r15w
mov rax, r12
je 0x14000b20d
nop
add rax, 2
dec rdx
cmp word [rax], r15w
jne 0x14000b200
lea r8, [0x140033620]
sub r8, rax
nop word [rax + rax]
cmp rdx, 1
jb 0x14000b6ef
movzx ecx, word [r8 + rax]
dec rdx
mov word [rax], cx
add rax, 2
cmp word [r8 + rax], r15w
jne 0x14000b220
cmp word [0x140032e20], r15w
mov word [rax], r15w
jne 0x14000b28a
cmp word [0x14002ed90], r15w
mov edx, 0x1000
mov rcx, rdi
je 0x14000b286
mov r8, r12
sub r8, rdi
cmp rdx, 1
jb 0x14000b6ef
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b266
mov word [rcx], r15w
mov edx, 8
lea rcx, [rsp + 0x68]
call fcn.14000abd0
mov rdi, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
mov edx, 4
call fcn.14000abd0
mov rdx, r12
lea rcx, [rbp + 0x30]
call fcn.14000a330
movups xmm0, xmmword [rax + 0x10]
movups xmm1, xmmword [rax + 0x20]
mov eax, dword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm1
test al, al
je 0x14000b2d7
mov ebx, r15d
jmp 0x14000b3bb
mov rax, qword [rbp - 0x70]
mov ebx, 0xffffffff
mov r8, qword [rbp - 0x80]
test eax, eax
je 0x14000b396
mov r9, r8
mov r10d, eax
movzx eax, byte [r9]
lea r9, [r9 + 1]
xor ebx, eax
mov eax, ebx
and al, 1
neg al
sbb ecx, ecx
shr ebx, 1
and ecx, 0xedb88320
xor ecx, ebx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb ebx, ebx
shr ecx, 1
and ebx, 0xedb88320
xor ebx, ecx
sub r10, 1
jne 0x14000b2f2
not ebx
mov rcx, r8
test ebx, ebx
cmove ebx, r14d
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x60], ebx
jne 0x14000b3cd
mov rsi, 0xffffffffffffffff
jmp 0x14000b47c
cmp word [0x14002ed90], r15w
mov edx, 0x1000
mov word [0x14002cd80], r15w
mov rcx, r13
je 0x14000b410
mov r8, r12
sub r8, r13
nop dword [rax]
cmp rdx, 1
jb 0x14000b6ef
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b3f0
mov word [rcx], r15w
mov rbx, r13
movzx eax, word [0x14002cd80]
test ax, ax
je 0x14000b448
cmp ax, 0x5c
jne 0x14000b43b
xor edx, edx
mov word [rbx], r15w
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov word [rbx], si
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x14000b423
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov edx, 0x40000000
mov rcx, r12
mov dword [rsp + 0x20], 2
lea r8d, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x14000b6e9
test rdi, rdi
je 0x14000b4e0
mov ebx, 0x8000
lea rcx, [0x140035e20]
cmp rdi, rbx
cmovbe ebx, edi
movsxd r14, ebx
mov rdx, r14
call fcn.14000abd0
cmp rsi, 0xffffffffffffffff
je 0x14000b4ce
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], r15d
mov r8d, ebx
mov qword [rsp + 0x20], r15
lea rdx, [0x140035e20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000b6dd
sub rdi, r14
jne 0x14000b481
lea r14d, [rdi + 1]
test rdi, rdi
jne 0x14000b6e3
lea rdi, [0x140032e20]
cmp rsi, 0xffffffffffffffff
je 0x14000b110
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000b108
mov rcx, qword [0x140030dc8]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [0x140030de0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140030dd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400053e0
mov rcx, qword [0x140030da0]
call fcn.1400120f4
mov rcx, qword [0x140032df0]
call fcn.1400120f4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x140027918]
mov edx, 0x80
mov r9d, eax
lea rcx, [rbp + 0x30]
call fcn.140001060
lea rdx, [rbp + 0x30]
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xorps xmm0, xmm0
mov dword [rbp - 0x40], 0x68
xor eax, eax
movups xmmword [rbp - 0x3c], xmm0
mov dword [rbp + 0x24], eax
movups xmmword [rbp - 0x2c], xmm0
movups xmmword [rbp - 0x1c], xmm0
movups xmmword [rbp - 0xc], xmm0
movups xmmword [rbp + 4], xmm0
movups xmmword [rbp + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000b6f5
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x60]
mov qword [0x140030d90], rcx
mov dword [rsp + 0x54], r15d
test rcx, rcx
je 0x14000b640
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x140030d90]
lea rdx, [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, dword [rsp + 0x54]
test eax, eax
cmove ecx, r14d
mov dword [rsp + 0x54], ecx
mov rcx, qword [0x140030d90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140030d90], r15
call fcn.14000ad60
mov eax, dword [rsp + 0x54]
mov r13, qword [rsp + 0x1d0]
mov r12, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x1f0]
mov rdi, qword [rsp + 0x200]
mov rsi, qword [rsp + 0x1f8]
mov r15, qword [rsp + 0x1c0]
mov r14, qword [rsp + 0x1c8]
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.14000b720
add rsp, 0x1e0
pop rbp
ret
call fcn.14000aaf0
int3
call fcn.14000aba0
int3
lea rcx, str.Error__failed_to_register_signal_handler.
call fcn.14000a9f0
int3
call fcn.14000f7e8
int3
mov rcx, qword [0x140030dc0]
shr rax, 0x20
mov edx, eax
call fcn.14000aa70
int3
call fcn.14000f7e8
int3
call fcn.14000ab30
int3
call fcn.14000ab30
int3
call fcn.14000aa30
int3
call fcn.14000ab10
int3
call fcn.14000ab70
int3
call fcn.14000f7e8
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
call fcn.14000ab50
int3
call fcn.14000ab30
int3