Function at 0x1400116c0
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Read file on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r13
push r12
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
lea r13, str.libgcc_s_dw2_1.dll
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
test rax, rax
je 0x1400017a0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.__register_frame_info
mov rcx, r12
mov qword [0x140025040], rax
call r13
lea rdx, str.__deregister_frame_info
mov rcx, r12
mov rbx, rax
call r13
mov qword [0x14001e010], rax
test rbx, rbx
jne 0x1400017b5
lea rcx, [0x1400017d0]
add rsp, 0x28
pop rbx
pop r12
pop r13
pop rbp
jmp fcn.1400016c7
lea rax, [0x140001710]
lea rbx, [0x140001700]
mov qword [0x14001e010], rax
lea rdx, [0x140025060]
lea rcx, [section..eh_fram]
call rbx
jmp 0x140001787
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x168
movaps xmmword [rsp + 0x150], xmm6
mov rax, qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea r12, [0x1400250a0]
xor edx, edx
lea rcx, [0x1400320a0]
mov qword [rsp + 0x88], rax
call rax
xor ecx, ecx
mov byte [0x1400340a0], 1
mov rdx, r12
mov rbx, qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r8d, 0x1000
call rbx
test eax, eax
je 0x14001163e
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov r8d, 1
mov dword [rsp + 0x28], 0
mov edx, 0x80000000
mov rcx, r12
mov dword [rsp + 0x20], 3
mov qword [rsp + 0x80], rax
call rax
mov qword [0x1400340b8], rax
cmp rax, 0xffffffffffffffff
je 0x14001157d
xor ecx, ecx
mov r8d, 0x1000
mov rdx, r12
call rbx
test eax, eax
je 0x14001163e
xor r8d, r8d
xor edx, edx
mov rcx, r12
mov rsi, qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
call rsi
lea ecx, [rax + 1]
mov ebx, eax
add rcx, rcx
call sub.msvcrt.dll_malloc
mov r13, rax
test rax, rax
je 0x14001156c
mov r8d, ebx
mov rdx, rax
mov rcx, r12
call rsi
test eax, eax
je 0x140011347
lea rdi, [rsp + 0xd0]
xor r8d, r8d
xor edx, edx
mov r9, r13
mov qword [rsp + 0x78], rdi
mov rbx, qword [sym.imp.msvcrt.dll_wcstombs_s]
mov rcx, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
call rbx
test eax, eax
jne 0x140011347
mov rsi, qword [rsp + 0xd0]
mov rcx, rsi
call sub.msvcrt.dll_malloc
mov r12, rax
test rax, rax
je 0x14001156c
mov r9, r13
mov r8, rsi
mov rdx, rax
mov rcx, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
call rbx
test eax, eax
jne 0x14001133f
mov rcx, r13
call sub.msvcrt.dll_free
xor r9d, r9d
mov r8, qword [rsp + 0x78]
mov rcx, r12
mov dword [rsp + 0x20], 1
lea rdx, str.dont_search_path
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
jne 0x140010c72
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, qword [0x1400340b8]
mov r15, qword [sym.imp.KERNEL32.dll_SetFilePointer]
xor r8d, r8d
mov edx, 0xfffffff8
mov r9d, 2
call r15
cmp eax, 0xffffffff
je 0x14001164a
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400340b8]
mov r9d, 1
call r15
mov rcx, qword [0x1400340b8]
mov r8d, 8
mov qword [rsp + 0x20], 0
mov eax, eax
lea r9, [rsp + 0xa4]
mov qword [0x1400340c0], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x78], rax
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
mov rdi, rax
call rax
test eax, eax
je 0x140011571
cmp dword [rsp + 0xa4], 8
jne 0x140011571
mov rdx, qword [0x1400340c0]
xor r9d, r9d
xor r8d, r8d
sub edx, dword [rsp + 0xd0]
mov rcx, qword [0x1400340b8]
call r15
cmp eax, 0xffffffff
je 0x14001164a
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1400340b8]
lea rdx, [rsp + 0xa1]
lea r9, [rsp + 0xa8]
mov r8d, 3
call rdi
test eax, eax
je 0x140011571
cmp dword [rsp + 0xa8], 3
jne 0x140011571
cmp byte [rsp + 0xa1], 0x4b
jne 0x14001164a
cmp byte [rsp + 0xa2], 0x41
jne 0x14001164a
cmp byte [rsp + 0xa3], 0x59
jne 0x14001164a
mov ecx, 0x20003
call sub.msvcrt.dll_malloc
mov qword [0x1400340d0], rax
test rax, rax
je 0x14001156c
mov ecx, 0x20000
call sub.msvcrt.dll_malloc
mov qword [0x1400340f0], rax
test rax, rax
je 0x14001156c
mov ecx, 0x274b8
call sub.msvcrt.dll_malloc
mov r8, rax
test rax, rax
je 0x140011561
mov qword [rax + 0x73b0], 0
pxor xmm0, xmm0
mov qword [rax + 0x73c8], 0
mov qword [rax + 0x72d8], 0
mov qword [rax + 0x73ec], 0
mov qword [rax + 0x73f8], 0
mov qword [rax + 0x7400], 0
mov qword [rax + 0x7420], 0
mov dword [rax + 0x73f4], 0
mov qword [rax + 0x7440], 0
mov dword [rax + 0x7448], 0
mov dword [rax + 0x7454], 0
mov qword [rax + 0x274b0], 0
movups xmmword [rax + 0x73a0], xmm0
movups xmmword [rax + 0x73d8], xmm0
xor eax, eax
cpuid
xor ecx, ecx
cmp eax, 6
jbe 0x140010b7e
mov eax, 7
cpuid
shr ebx, 8
and ebx, 1
mov ecx, ebx
lea rax, [rsp + 0x9e]
mov rbp, rdi
mov dword [r8 + 0x73d0], ecx
movdqa xmm6, xmmword [0x1400202e0]
mov qword [r8 + 0x7410], 0x8000001
mov dword [r8 + 0x7458], 0
mov qword [r8 + 0x7388], 0
mov dword [r8 + 0x7390], 1
mov qword [0x1400340c8], r8
mov qword [rsp + 0x68], rax
lea rax, [0x1400318a0]
mov qword [rsp + 0x58], rax
nop dword [rax]
mov rsi, qword [rsp + 0x68]
xor r13d, r13d
mov ebx, 2
lea rdi, [rsp + 0xac]
nop dword [rax]
mov r14, qword [0x140034100]
mov r8, qword [0x1400340f8]
sub r8, r14
jne 0x140010d70
mov rcx, qword [0x1400340e0]
mov rdx, qword [0x1400340d8]
cmp rcx, rdx
setb al
or r13b, al
je 0x140010cd0
mov rcx, qword [0x1400340c8]
movups xmmword [0x1400340f8], xmm6
call fcn.14000f390
mov r8, rax
mov rax, qword [0x140034100]
cmp qword [0x1400340f8], rax
sete r13b
cmp r8, 0xffffffffffffff88
ja 0x1400112ee
mov qword [0x1400340f8], rax
mov qword [0x140034100], 0
jmp 0x140010bf8
mov rax, qword [rsp + 0xe8]
test rax, rax
je 0x140011354
cmp dword [rax + 0x84], 4
jbe 0x140011354
mov ebx, dword [rax + 0xa8]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, r12
call sub.msvcrt.dll_free
test ebx, ebx
je 0x140010962
mov rcx, qword [0x1400340b8]
lea edx, [rbx - 8]
xor r9d, r9d
xor r8d, r8d
mov r15, qword [sym.imp.KERNEL32.dll_SetFilePointer]
call r15
jmp 0x140010981
cmp rcx, rdx
jne 0x1400112ee
mov r12, qword [0x1400340c0]
mov rcx, qword [0x1400340b8]
xor r8d, r8d
xor edx, edx
mov r9d, 1
call r15
mov eax, eax
sub r12, rax
je 0x140010bf8
mov r8d, r12d
cmp r12, 0x20002
jbe 0x140010d18
mov r8d, 0x20003
mov r12d, 0x20003
mov qword [rsp + 0x20], 0
mov rdx, qword [0x1400340d0]
mov r9, rdi
mov rcx, qword [0x1400340b8]
call rbp
test eax, eax
je 0x140011571
mov eax, dword [rsp + 0xac]
cmp r12, rax
jne 0x140011571
add qword [0x1400340b0], r12
mov qword [0x1400340e0], 0
mov qword [0x1400340d8], r12
jmp 0x140010bf8
cmp r8, rbx
lea rax, [0x1400340f0]
mov rcx, rsi
cmova r8, rbx
mov rdx, qword [rax]
mov r12, r8
add rdx, r14
call sub.msvcrt.dll_memcpy
add r14, r12
add rsi, r12
mov qword [0x140034100], r14
sub rbx, r12
jne 0x140010bf8
movzx eax, word [rsp + 0x9e]
mov rdi, qword [rsp + 0x58]
mov word [rdi], ax
test ax, ax
je 0x140010dc8
add rdi, 2
mov qword [rsp + 0x58], rdi
jmp 0x140010be0
lea rax, [0x1400318a0]
movzx eax, word [rax]
test ax, ax
je 0x140011364
lea r12, [0x14002f8a0]
lea rbx, [0x1400318a0]
lea rsi, [r12 + 0x2000]
nop dword [rax]
lea rdi, [0x1400320a0]
movzx edx, word [rdi]
cmp ax, 0x5c
je 0x140011183
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x140010df8
lea rax, [0x1400320a0]
xor r9d, r9d
lea rcx, [0x1400320a0]
movzx edx, word [rax]
lea rax, [0x14002f8a0]
mov word [0x14002f8a0], r9w
lea r8, [rax + 0x2000]
test dx, dx
jne 0x140010e59
jmp 0x140010e6c
cmp rax, r8
je 0x14001d2b8
add rcx, 2
mov word [rax], dx
add rax, 2
movzx edx, word [rcx]
test dx, dx
jne 0x140010e50
xor r8d, r8d
mov word [rax], r8w
cmp word [0x14002f8a0], 0
je 0x1400112f3
mov edx, 0x1000
lea rax, [0x14002f8a0]
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140010e90
test rdx, rdx
je 0x140011695
mov dword [rax], 0x5c
lea rax, [0x1400318a0]
cmp word [0x14002f8a0], 0
movzx ecx, word [rax]
je 0x1400112ff
mov edx, 0x1000
lea rax, [0x14002f8a0]
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140010ed8
test cx, cx
je 0x140010f21
test rdx, rdx
je 0x1400116a4
lea r8, [0x1400318a0]
jmp 0x140010f09
test rdx, rdx
je 0x1400116a9
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x140010f00
xor ecx, ecx
cmp word [0x14002f0a0], 0
mov word [rax], cx
je 0x14001129e
mov rsi, qword [rsp + 0x78]
mov edx, 8
mov rcx, rsi
call fcn.140010610
mov rdi, qword [rsp + 0xd0]
mov edx, 1
mov rcx, rsi
mov qword [rsp + 0x60], rdi
call fcn.140010610
mov dword [rsp + 0x28], 0
xor r9d, r9d
mov edx, 0x40000000
mov qword [rsp + 0x30], 0
mov r8d, 2
mov rcx, r12
mov rax, qword [rsp + 0x80]
mov dword [rsp + 0x20], 2
call rax
mov qword [rsp + 0x70], rax
cmp rax, 0xffffffffffffffff
je 0x140011607
test rdi, rdi
je 0x140011173
nop dword [rax]
mov rax, qword [rsp + 0x60]
mov r12d, 0x8000
lea rdi, [0x1400270a0]
lea r13, [rsp + 0xb0]
cmp rax, r12
cmovbe r12, rax
xor r14d, r14d
mov qword [rsp + 0x58], r12
mov rsi, r12
nop dword [rax]
mov r12, qword [0x140034100]
mov r8, qword [0x1400340f8]
sub r8, r12
jne 0x140011100
mov rcx, qword [0x1400340e0]
mov rdx, qword [0x1400340d8]
cmp rcx, rdx
setb al
or r14b, al
je 0x140011060
mov rcx, qword [0x1400340c8]
movups xmmword [0x1400340f8], xmm6
call fcn.14000f390
mov r8, rax
mov rax, qword [0x140034100]
cmp qword [0x1400340f8], rax
sete r14b
cmp r8, 0xffffffffffffff88
ja 0x1400112ee
mov qword [0x1400340f8], rax
mov qword [0x140034100], 0
jmp 0x140010fe0
cmp rcx, rdx
jne 0x1400112ee
mov rbx, qword [0x1400340c0]
mov rcx, qword [0x1400340b8]
xor r8d, r8d
xor edx, edx
mov r9d, 1
call r15
mov eax, eax
sub rbx, rax
je 0x140010fe0
mov r8d, ebx
cmp rbx, 0x20002
jbe 0x1400110a7
mov r8d, 0x20003
mov ebx, 0x20003
mov qword [rsp + 0x20], 0
mov rdx, qword [0x1400340d0]
mov r9, r13
mov rcx, qword [0x1400340b8]
call rbp
test eax, eax
je 0x140011571
mov eax, dword [rsp + 0xb0]
cmp rbx, rax
jne 0x140011571
add qword [0x1400340b0], rbx
mov qword [0x1400340e0], 0
mov qword [0x1400340d8], rbx
jmp 0x140010fe0
cmp r8, rsi
mov rbx, r8
lea rax, [0x1400340f0]
mov rcx, rdi
cmova rbx, rsi
mov rdx, qword [rax]
mov r8, rbx
add rdx, r12
add r12, rbx
add rdi, rbx
call sub.msvcrt.dll_memcpy
mov qword [0x140034100], r12
sub rsi, rbx
jne 0x140010fe0
xor r9d, r9d
mov r8d, dword [rsp + 0x58]
mov qword [rsp + 0x20], 0
lea rdx, [0x1400270a0]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140011632
mov rdi, qword [rsp + 0x58]
sub qword [rsp + 0x60], rdi
jne 0x140010fb0
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140010bd0
xor r13d, r13d
xor r14d, r14d
lea rax, [0x14002f8a0]
mov rcx, rdi
mov word [rbx], r13w
mov word [0x14002f8a0], r14w
test dx, dx
jne 0x1400111b9
jmp 0x1400111cc
cmp rax, rsi
je 0x14001d2b8
add rcx, 2
mov word [rax], dx
add rax, 2
movzx edx, word [rcx]
test dx, dx
jne 0x1400111b0
xor edi, edi
mov word [rax], di
cmp word [r12], 0
je 0x140011333
mov edx, 0x1000
lea rax, [0x14002f8a0]
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x1400111f0
test rdx, rdx
je 0x14001169a
mov dword [rax], 0x5c
lea rax, [0x1400318a0]
cmp word [r12], 0
movzx ecx, word [rax]
je 0x140011319
mov edx, 0x1000
lea rax, [0x14002f8a0]
nop
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140011230
test cx, cx
je 0x140011279
test rdx, rdx
je 0x14001169f
lea r8, [0x1400318a0]
jmp 0x140011261
test rdx, rdx
je 0x1400116ae
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x140011258
xor r10d, r10d
mov r11d, 0x5c
xor edx, edx
mov rcx, r12
mov word [rax], r10w
mov rax, qword [rsp + 0x88]
mov word [rbx], r11w
call rax
jmp 0x140010e0c
movzx edx, word [0x14002f8a0]
lea rax, [0x14002f0a0]
lea rcx, [0x14002f8a0]
lea r8, [rax + 0x2000]
test dx, dx
jne 0x1400112d1
jmp 0x1400112e4
cmp rax, r8
je 0x14001d2b8
add rcx, 2
mov word [rax], dx
add rax, 2
movzx edx, word [rcx]
test dx, dx
jne 0x1400112c8
xor edx, edx
mov word [rax], dx
jmp 0x140010f34
call fcn.140008f30
lea rax, [0x14002f8a0]
jmp 0x140010ea7
lea rax, [0x14002f8a0]
mov edx, 0x1000
test cx, cx
jne 0x140010ef4
jmp 0x140010f21
lea rax, [0x14002f8a0]
mov edx, 0x1000
test cx, cx
jne 0x14001124c
jmp 0x140011279
lea rax, [0x14002f8a0]
jmp 0x140011207
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x140010962
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
jmp 0x14001095a
mov rcx, qword [0x1400340b8]
mov rbp, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbp
mov r12, qword [0x1400340c8]
test r12, r12
je 0x14001142d
cmp qword [r12 + 0x73c8], 0
jne 0x14001142d
mov r13, qword [r12 + 0x73d8]
mov rbx, qword [r12 + 0x73a8]
mov r14, qword [r12 + 0x73b0]
test r13, r13
je 0x1400113e1
mov rdx, qword [r13]
mov rsi, qword [r13 + 0x6ac8]
mov r15, qword [r13 + 0x6ad0]
test rdx, rdx
je 0x1400115f1
test rsi, rsi
je 0x140011688
mov rcx, r15
call rsi
mov rdx, r13
mov rcx, r15
call rsi
mov rdx, qword [r12 + 0x73f8]
pxor xmm0, xmm0
mov dword [r12 + 0x73f0], 0
movups xmmword [r12 + 0x73d8], xmm0
test rdx, rdx
je 0x14001166b
test rbx, rbx
je 0x140011656
mov rcx, r14
call rbx
mov qword [r12 + 0x73f8], 0
mov rdx, r12
mov rcx, r14
call rbx
mov rcx, qword [0x1400340d0]
call sub.msvcrt.dll_free
mov rcx, qword [0x1400340f0]
call sub.msvcrt.dll_free
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rdi, qword [rsp + 0x78]
mov edx, pe_nt_image_headers64
lea r8, [0x14001f392]
mov r9d, eax
mov rcx, rdi
mov rsi, rdi
call fcn.140001a50
mov rdx, rdi
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor eax, eax
mov ecx, 0xd
rep stosq qword [rdi], rax
mov dword [rsp + 0xd0], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x40], rsi
mov rdx, rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], 0
lea rcx, [0x14002f0a0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140011676
mov rcx, qword [rsp + 0xb8]
call rbp
mov rcx, qword [rsp + 0xb0]
mov dword [rsp + 0xac], 0
mov qword [0x1400340a8], rcx
test rcx, rcx
je 0x140011553
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x1400340a8]
lea rdx, [rsp + 0xac]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14001153f
mov dword [rsp + 0xac], 1
mov rcx, qword [0x1400340a8]
call rbp
mov qword [0x1400340a8], 0
call fcn.140008f70
mov eax, dword [rsp + 0xac]
jmp 0x1400115d5
mov qword [0x1400340c8], 0
call fcn.140008f50
lea rcx, str.Error__couldnt_read_attached_data.
call fcn.140008ed0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_access_unpacked_executable.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xd0]
call sub.msvcrt.dll_puts
mov eax, 1
movaps xmm6, xmmword [rsp + 0x150]
add rsp, 0x168
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test rsi, rsi
jne 0x1400113d9
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x1400113e1
mov ecx, 2
call qword [fcn.14001c980]
lea r8, [0x14002f8a0]
lea rdx, str.Error__failed_to_open__ls_for_writing._n
mov rcx, rax
call fcn.140001a20
mov ecx, 2
call sub.msvcrt.dll_exit
lea rcx, str.Error__couldnt_runtime_expand_temporary_files.
call fcn.140008ed0
lea rcx, str.Error__failed_to_locate_onefile_filename.
call fcn.140008ed0
lea rcx, str.Error__couldnt_find_attached_data.
call fcn.140008ed0
mov rcx, rdx
call sub.msvcrt.dll_free
mov rcx, r12
call sub.msvcrt.dll_free
jmp 0x14001142d
test rbx, rbx
jne 0x140011425
jmp 0x14001165e
lea rcx, str.Error__couldnt_launch_child.
call fcn.140008ed0
nop word [rax + rax]
mov rcx, rdx
call sub.msvcrt.dll_free
jmp 0x1400115fa
jmp 0x14001d2b8
jmp 0x14001d2b8
jmp 0x14001d2b8
jmp 0x14001d2b8
jmp 0x14001d2b8
jmp 0x14001d2b8
sub rsp, 0x58
call fcn.1400090c0
test al, al
je 0x140011750
mov edx, 1
lea rcx, [0x1400090a0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x1400116f0
add rsp, 0x58
jmp 0x1400107c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov qword [rsp + 0x30], 0
mov r8d, eax
lea rax, [rsp + 0x48]
mov dword [rsp + 0x28], 0
mov ecx, 0x1300
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_register_signal_handler.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0x48]
call sub.msvcrt.dll_puts
mov eax, 1
add rsp, 0x58
ret
mov ecx, 2
call qword [fcn.14001c980]
lea r8, str._TEMP_onefile__PID___TIME_
lea rdx, str.Error__couldnt_runtime_expand_spec__ls._n
mov rcx, rax
call fcn.140001a20
call sub.msvcrt.dll_abort
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
call sub.msvcrt.dll_abort
nop
nop
nop
jmp 0x140001720