Function at 0x140013c80
Capabilities:
Accept command line arguments
Create process on windows
Extract resource via kernel32 functions
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
movaps xmmword [rsp + 0x100], xmm6
mov rax, qword [0x140037008]
xor rax, rsp
mov qword [rsp + 0xf8], rax
call fcn.14001716c
call fcn.140017174
lea rcx, [0x14003bad0]
lea rdx, str._CACHE_DIR_Sfvip_All_x64
mov r8d, 0x1000
call fcn.140013360
test al, al
je 0x140014305
lea rcx, [0x140013c00]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14001435a
mov edx, 0x1b
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [0x1400482d8], rax
movzx ebx, byte [rax]
movzx edx, byte [rax + 1]
movzx ecx, byte [rax + 2]
add rax, 3
mov qword [0x1400482e0], rax
cmp bl, 0x4b
jne 0x140014351
cmp dl, 0x41
jne 0x140014351
cmp cl, 0x59
jne 0x140014351
mov qword [0x1400482e8], 0
mov ecx, 0x20000
call fcn.14001c170
mov qword [0x140048300], rax
test rax, rax
je 0x140014363
mov ecx, 0x274b8
call fcn.14001c170
test rax, rax
je 0x14001436c
mov rbx, rax
mov qword [rax + 0x73c8], 0
mov qword [rax + 0x72d8], 0
mov qword [rax + 0x7420], 0
mov qword [rax + 0x7440], 0
mov dword [rax + 0x7448], 0
mov dword [rax + 0x7454], 0
mov qword [rax + 0x274b0], 0
xorps xmm0, xmm0
movups xmmword [rax + 0x73d8], xmm0
movups xmmword [rax + 0x73ec], xmm0
movups xmmword [rax + 0x73f8], xmm0
movups xmmword [rax + 0x73a0], xmm0
mov qword [rax + 0x73b0], 0
xor ebp, ebp
xor eax, eax
xor ecx, ecx
xchg rbx, rdi
cpuid
xchg rbx, rdi
test eax, eax
jle 0x140013e2d
cmp eax, 7
jb 0x140013e2d
mov eax, 7
xor ecx, ecx
xchg rbx, rbp
cpuid
xchg rbx, rbp
shr ebp, 8
and ebp, 1
mov dword [rbx + 0x73d0], ebp
mov qword [rbx + 0x7410], 0x8000001
mov dword [rbx + 0x7458], 0
mov qword [rbx + 0x7388], 0
mov dword [rbx + 0x7390], 1
mov qword [0x140048318], rbx
lea r13, [0x140048320]
lea r15, [rsp + 0x70]
lea r14, [0x14003e2d0]
lea rbx, [0x14003dad0]
lea r12, [0x1400402d0]
jmp 0x140014189
mov edx, 2
mov rcx, r15
call fcn.140014520
movzx eax, word [rsp + 0x70]
mov word [rsi], ax
add rsi, 2
test ax, ax
jne 0x140013e90
movzx eax, word [0x140048320]
test ax, ax
je 0x140014191
mov word [0x14003e2d0], 0
movzx edx, word [0x14003bad0]
mov rcx, r14
test dx, dx
lea rbp, [0x14003bad0]
je 0x140013f50
xor ecx, ecx
nop
cmp rcx, 0x2000
je 0x140014300
mov word [rcx + r14], dx
movzx edx, word [rcx + rbp + 2]
test dx, dx
je 0x140013f35
mov word [rcx + r14 + 2], dx
movzx edx, word [rcx + rbp + 4]
test dx, dx
je 0x140013f3e
mov word [rcx + r14 + 4], dx
movzx edx, word [rcx + rbp + 6]
test dx, dx
je 0x140013f47
mov word [rcx + r14 + 6], dx
movzx edx, word [rcx + rbp + 8]
add rcx, 8
test dx, dx
jne 0x140013ee0
add rcx, r14
jmp 0x140013f50
add rcx, r14
add rcx, 2
jmp 0x140013f50
add rcx, r14
add rcx, 4
jmp 0x140013f50
add rcx, r14
add rcx, 6
nop
mov word [rcx], 0
cmp word [0x14003e2d0], 0
mov rcx, r14
je 0x140013f87
mov rdx, 0xfffffffffffff000
mov rcx, r14
nop dword [rax]
inc rdx
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x140013f70
test rdx, rdx
je 0x140014300
mov rdi, rbx
mov dword [rcx], 0x5c
cmp word [0x14003e2d0], 0
je 0x140013fc3
mov ecx, 0x1000
mov rdx, r14
nop word cs:[rax + rax]
lea rbx, [rdx + 2]
dec rcx
cmp word [rdx + 2], 0
mov rdx, rbx
jne 0x140013fb0
jmp 0x140013fcb
mov ecx, 0x1000
mov rbx, r14
xor ebp, ebp
nop dword [rax]
cmp rcx, rbp
je 0x140014300
mov word [rbx + rbp*2], ax
movzx eax, word [r13 + rbp*2 + 2]
inc rbp
test ax, ax
jne 0x140013fd0
mov word [rbx + rbp*2], 0
cmp word [0x14003dad0], 0
mov rbx, rdi
jne 0x140014092
movzx ecx, word [0x14003e2d0]
mov rax, rbx
test cx, cx
je 0x14001408d
xor eax, eax
nop word cs:[rax + rax]
cmp rax, 0x2000
je 0x140014300
mov word [rax + rbx], cx
movzx ecx, word [rax + r14 + 2]
test cx, cx
je 0x140014074
mov word [rax + rbx + 2], cx
movzx ecx, word [rax + r14 + 4]
test cx, cx
je 0x14001407d
mov word [rax + rbx + 4], cx
movzx ecx, word [rax + r14 + 6]
test cx, cx
je 0x140014086
mov word [rax + rbx + 6], cx
movzx ecx, word [rax + r14 + 8]
add rax, 8
test cx, cx
jne 0x140014020
add rax, rbx
jmp 0x14001408d
add rax, rbx
add rax, 2
jmp 0x14001408d
add rax, rbx
add rax, 4
jmp 0x14001408d
add rax, rbx
add rax, 6
mov word [rax], 0
mov edx, 8
mov rcx, r15
call fcn.140014520
mov rbp, qword [rsp + 0x70]
mov edx, 4
mov rcx, r15
call fcn.140014520
mov esi, dword [rsp + 0x70]
mov rcx, r14
call fcn.140013190
mov rdi, 0xffffffffffffffff
cmp esi, eax
je 0x14001410d
mov rcx, r14
call fcn.1400143d0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
mov rcx, r14
mov edx, 0x40000000
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140014327
test rbp, rbp
jne 0x140014125
mov rsi, r13
cmp rdi, 0xffffffffffffffff
jne 0x140014180
jmp 0x140013e90
sub rbp, rsi
je 0x140014112
cmp rbp, 0x8000
mov esi, 0x8000
cmovb rsi, rbp
mov rcx, r12
mov rdx, rsi
call fcn.140014520
cmp rdi, 0xffffffffffffffff
je 0x140014120
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov rdx, r12
mov r8d, esi
mov r9, r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140014120
jmp 0x140014311
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, r13
jmp 0x140013e90
mov rcx, qword [0x140048318]
call fcn.14000aea0
mov rcx, qword [0x140048300]
call fcn.14001c15c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x1400319ee]
lea rsi, [rsp + 0x70]
mov edx, 0x80
mov rcx, rsi
mov r9d, eax
call fcn.140013a70
lea rcx, str.NUITKA_ONEFILE_PARENT
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xorps xmm6, xmm6
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0xd0], 0
mov dword [rsp + 0x70], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rsi
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
lea rcx, [0x14003dad0]
xor esi, esi
mov rdx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140014380
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
mov qword [0x14003bab8], rcx
mov dword [rsp + 0x54], 0
test rcx, rcx
je 0x1400142d2
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14003bab8]
lea rdx, [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x1400142b6
mov dword [rsp + 0x54], 1
mov rcx, qword [0x14003bab8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x14003bab8], 0
mov esi, dword [rsp + 0x54]
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.140015400
mov eax, esi
movaps xmm6, xmmword [rsp + 0x100]
add rsp, 0x118
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.14001c0fc
lea rcx, str._CACHE_DIR_Sfvip_All_x64
call fcn.1400143a0
lea rcx, str.Error__couldnt_runtime_expand_target_path.
call fcn.14001c410
mov ecx, 2
call fcn.14001ace0
mov ecx, 2
call fcn.140016fc4
lea rdx, str.Error__failed_to_open__ls_for_writing._n
lea r8, [0x14003e2d0]
mov rcx, rax
call fcn.140013b90
mov ecx, 2
call fcn.14001ace0
lea rcx, str.Error__could_find_attached_data_header.
jmp 0x140014318
lea rcx, str.Error__failed_to_register_signal_handler.
jmp 0x140014318
lea rcx, str.Error__couldnt_allocate_memory.
jmp 0x140014318
mov qword [0x140048318], 0
lea rcx, str.Error__couldnt_allocate_memory.
jmp 0x140014318
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Error__couldnt_launch_child
mov edx, eax
call fcn.140013b00
mov ecx, 2
call fcn.14001ace0
int3