Function at 0x14001eb30
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Read file on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r13
push r12
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
lea r13, str.libgcc_s_dw2_1.dll
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
test rax, rax
je 0x140001770
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r13, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.__register_frame_info
mov rcx, r12
mov qword [0x140031040], rax
call r13
lea rdx, str.__deregister_frame_info
mov rcx, r12
mov rbx, rax
call r13
mov qword [0x140028010], rax
test rbx, rbx
jne 0x140001785
lea rcx, [0x1400017a0]
add rsp, 0x28
pop rbx
pop r12
pop r13
pop rbp
jmp fcn.140001698
lea rax, [0x1400016e0]
lea rbx, [0x1400016d0]
mov qword [0x140028010], rax
lea rdx, [0x140031060]
lea rcx, [section..eh_fram]
call rbx
jmp 0x140001757
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x128
lea r12, [0x14003c0c0]
call qword [0x140028100]
xor ecx, ecx
mov r8d, 0x1000
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14001f468
lea r14, str._TEMP_onefile__PID___TIME_
lea r13, [0x14003e0e0]
mov r8d, 0x1000
mov rdx, r14
mov rcx, r13
call fcn.14001e830
test al, al
je 0x14001f7f4
mov edx, 1
lea rcx, [0x140003e70]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14001f168
mov rax, qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
mov rcx, r13
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r9d, r9d
mov rcx, r12
mov byte [0x14003e0c0], 1
mov r8d, 1
mov edx, 0x80000000
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov qword [rsp + 0x58], rax
call rax
mov qword [0x140040130], rax
cmp rax, 0xffffffffffffffff
je 0x14001f6f1
xor r8d, r8d
xor edx, edx
mov rcx, r12
mov rsi, qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
call rsi
lea ecx, [rax + 1]
mov ebx, eax
add rcx, rcx
call sub.msvcrt.dll_malloc
mov r14, rax
test rax, rax
je 0x14001f839
mov r8d, ebx
mov rdx, r14
mov rcx, r12
call rsi
lea rbp, [rsp + 0xa0]
test eax, eax
je 0x14001f6e4
xor r8d, r8d
xor edx, edx
mov rsi, qword [sym.imp.msvcrt.dll_wcstombs_s]
mov r9, r14
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rcx, rbp
call rsi
test eax, eax
jne 0x14001f6e4
mov rbx, qword [rsp + 0xa0]
mov rcx, rbx
call sub.msvcrt.dll_malloc
mov r12, rax
test rax, rax
je 0x14001f69f
mov r9, r14
mov r8, rbx
mov rdx, rax
mov rcx, rbp
mov qword [rsp + 0x20], 0xffffffffffffffff
call rsi
test eax, eax
jne 0x14001f6dc
xor r9d, r9d
mov r8, rbp
lea rdx, str.dont_search_path
mov rcx, r12
mov dword [rsp + 0x20], 1
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
jne 0x14001f5cd
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, qword [0x140040130]
mov rbx, qword [sym.imp.KERNEL32.dll_SetFilePointer]
xor r8d, r8d
mov edx, 0xfffffff8
mov r9d, 2
call rbx
cmp eax, 0xffffffff
je 0x14001f76d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140040130]
mov r9d, 1
call rbx
mov rcx, qword [0x140040130]
mov rsi, qword [sym.imp.KERNEL32.dll_ReadFile]
mov rdx, rbp
mov eax, eax
mov r8d, 8
mov qword [rsp + 0x20], 0
mov qword [0x1400400e0], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x68], rax
mov r9, rax
call rsi
test eax, eax
je 0x14001f661
cmp dword [rsp + 0x80], 8
jne 0x14001f5ae
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0xa0]
mov rcx, qword [0x140040130]
call rbx
cmp eax, 0xffffffff
je 0x14001f74e
mov rcx, qword [0x140040130]
lea rdx, [rsp + 0x79]
mov r9, rbp
mov qword [rsp + 0x20], 0
mov r8d, 3
call rsi
test eax, eax
je 0x14001f642
cmp dword [rsp + 0xa0], 3
jne 0x14001f587
cmp byte [rsp + 0x79], 0x4b
jne 0x14001f560
cmp byte [rsp + 0x7a], 0x41
jne 0x14001f539
cmp byte [rsp + 0x7b], 0x59
jne 0x14001f51a
mov ecx, 0x20003
call sub.msvcrt.dll_malloc
mov qword [0x140040110], rax
test rax, rax
je 0x14001f7b6
mov ecx, 0x20000
call sub.msvcrt.dll_malloc
mov qword [0x1400400f0], rax
test rax, rax
je 0x14001f7d5
mov ecx, 0x274b8
call sub.msvcrt.dll_malloc
mov r8, rax
test rax, rax
je 0x14001f78c
mov qword [rax + 0x73b0], 0
pxor xmm0, xmm0
mov qword [rax + 0x73c8], 0
mov qword [rax + 0x72d8], 0
mov qword [rax + 0x73ec], 0
mov qword [rax + 0x73f8], 0
mov qword [rax + 0x7400], 0
mov qword [rax + 0x7420], 0
mov dword [rax + 0x73f4], 0
mov qword [rax + 0x7440], 0
mov dword [rax + 0x7448], 0
mov dword [rax + 0x7454], 0
mov qword [rax + 0x274b0], 0
movups xmmword [rax + 0x73a0], xmm0
movups xmmword [rax + 0x73d8], xmm0
xor eax, eax
cpuid
xor ecx, ecx
cmp eax, 6
ja 0x14001f620
mov dword [r8 + 0x73d0], ecx
mov qword [r8 + 0x7410], 0x8000001
mov dword [r8 + 0x7458], 0
mov qword [r8 + 0x7388], 0
mov dword [r8 + 0x7390], 1
mov qword [0x140040128], r8
nop dword [rax + rax]
lea rbx, [0x1400310c0]
jmp 0x14001ef24
add rbx, 2
mov edx, 2
mov rcx, rbp
call fcn.14001d7e0
movzx eax, word [rsp + 0xa0]
mov word [rbx], ax
test ax, ax
jne 0x14001ef20
lea rax, [0x1400310c0]
movzx eax, word [rax]
test ax, ax
je 0x14001f350
lea rbx, [0x1400310c0]
lea r12, [0x14003a0c0]
nop word [rax + rax]
movzx edx, word [r13]
cmp ax, 0x5c
je 0x14001f1d8
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x14001ef68
movzx edx, word [r13]
xor r8d, r8d
lea rax, [0x14003a0c0]
lea rcx, [0x14003e0e0]
mov word [0x14003a0c0], r8w
lea r8, [rax + 0x2000]
test dx, dx
jne 0x14001efb9
jmp 0x14001efcc
cmp rax, r8
je 0x1400271b0
add rcx, 2
mov word [rax], dx
add rax, 2
movzx edx, word [rcx]
test dx, dx
jne 0x14001efb0
xor ecx, ecx
mov word [rax], cx
cmp word [0x14003a0c0], 0
je 0x14001f4e8
mov edx, 0x1000
lea rax, [0x14003a0c0]
nop dword [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x14001eff0
test rdx, rdx
je 0x14001f862
mov dword [rax], 0x5c
lea rax, [0x1400310c0]
cmp word [0x14003a0c0], 0
movzx ecx, word [rax]
je 0x14001f4c8
mov edx, 0x1000
lea rax, [0x14003a0c0]
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x14001f038
test cx, cx
je 0x14001f081
test rdx, rdx
je 0x14001f867
lea r8, [0x1400310c0]
jmp 0x14001f069
test rdx, rdx
je 0x14001f86c
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x14001f060
xor edx, edx
cmp word [0x1400398c0], 0
mov word [rax], dx
je 0x14001f300
mov rcx, r12
mov rax, qword [rsp + 0x58]
xor r9d, r9d
mov edx, 0x40000000
mov qword [rsp + 0x30], 0
mov r8d, 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
call rax
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14001f80e
mov edx, 8
mov rcx, rbp
lea rsi, [0x1400318c0]
call fcn.14001d7e0
mov r14, qword [rsp + 0xa0]
mov rdi, qword [sym.imp.KERNEL32.dll_WriteFile]
lea r15, str.static_srcOnefileBootstrap.c
test r14, r14
jne 0x14001f10d
jmp 0x14001f15a
sub r14, rbx
je 0x14001f15a
mov ebx, 0x8000
mov rcx, rsi
cmp r14, rbx
cmovbe rbx, r14
mov rdx, rbx
call fcn.14001d7e0
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
mov qword [rsp + 0x20], 0
mov rcx, r12
call rdi
test eax, eax
jne 0x14001f108
mov r8d, 0xa2
mov rdx, r15
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
sub r14, rbx
jne 0x14001f10d
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001ef10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_register_signal_handler.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
add rsp, 0x128
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
xor edi, edi
lea rcx, [0x14003a0c0]
mov word [rbx], si
lea rax, [0x14003e0e0]
mov word [0x14003a0c0], di
test dx, dx
jne 0x14001f210
jmp 0x14001f223
lea rdi, [0x1400400e0]
cmp rax, rdi
je 0x1400271b0
add rax, 2
mov word [rcx], dx
add rcx, 2
movzx edx, word [rax]
test dx, dx
jne 0x14001f200
xor r11d, r11d
mov word [rcx], r11w
cmp word [r12], 0
je 0x14001f50e
mov edx, 0x1000
lea rax, [0x14003a0c0]
nop word [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x14001f248
test rdx, rdx
je 0x14001f85d
mov dword [rax], 0x5c
lea rax, [0x1400310c0]
cmp word [r12], 0
movzx ecx, word [rax]
je 0x14001f4f4
mov edx, 0x1000
lea rax, [0x14003a0c0]
nop word [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x14001f290
test cx, cx
je 0x14001f2d9
test rdx, rdx
je 0x14001f871
lea r8, [0x1400310c0]
jmp 0x14001f2c1
test rdx, rdx
je 0x14001f858
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x14001f2b8
xor r9d, r9d
mov r10d, 0x5c
xor edx, edx
mov rcx, r12
mov word [rax], r9w
mov rax, qword [rsp + 0x60]
mov word [rbx], r10w
call rax
jmp 0x14001ef77
movzx ecx, word [0x14003a0c0]
lea rax, [0x14003a0c0]
lea rdx, [0x1400398c0]
lea r8, [rax + 0x2000]
test cx, cx
jne 0x14001f331
jmp 0x14001f344
cmp rax, r8
je 0x1400271b0
add rax, 2
mov word [rdx], cx
add rdx, 2
movzx ecx, word [rax]
test cx, cx
jne 0x14001f328
xor eax, eax
mov word [rdx], ax
jmp 0x14001f094
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, pe_nt_image_headers64
mov rcx, rbp
mov rdi, rbp
mov r9d, eax
lea r8, [0x14002a840]
call fcn.1400023a0
mov rdx, rbp
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor eax, eax
mov ecx, 0xd
rep stosq qword [rdi], rax
mov dword [rsp + 0xa0], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x40], rbp
mov rdx, rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], 0
lea rcx, [0x1400398c0]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14001f680
mov rcx, qword [rsp + 0x88]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x80]
mov dword [rsp + 0x7c], 0
mov qword [0x1400310a0], rcx
test rcx, rcx
je 0x14001f454
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x1400310a0]
lea rdx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14001f440
mov dword [rsp + 0x7c], 1
mov rcx, qword [0x1400310a0]
call rbx
mov qword [0x1400310a0], 0
call fcn.140003d40
mov eax, dword [rsp + 0x7c]
jmp 0x14001f1c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_locate_onefile_filename.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x14001f1c0
lea rax, [0x14003a0c0]
mov edx, 0x1000
test cx, cx
jne 0x14001f054
jmp 0x14001f081
lea rax, [0x14003a0c0]
jmp 0x14001f007
lea rax, [0x14003a0c0]
mov edx, 0x1000
test cx, cx
jne 0x14001f2ac
jmp 0x14001f2d9
lea rax, [0x14003a0c0]
jmp 0x14001f25f
mov r8d, 0x2e4
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_2___Y
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ede2
mov r8d, 0x2e0
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_1___A
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x7b], 0x59
je 0x14001ede2
jmp 0x14001f51a
mov r8d, 0x2df
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_0___K
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x7a], 0x41
je 0x14001edd7
jmp 0x14001f539
mov r8d, 0xeb
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.read_size__size
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x79], 0x4b
je 0x14001edcc
jmp 0x14001f560
mov r8d, 0xeb
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.read_size__size
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ed6c
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x14001f634
cmp dword [rax + 0x84], 4
jbe 0x14001f634
mov ebx, dword [rax + 0xa8]
mov rcx, rbp
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, r12
call sub.msvcrt.dll_free
test ebx, ebx
je 0x14001ece0
lea edx, [rbx - 8]
mov rcx, qword [0x140040130]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.KERNEL32.dll_SetFilePointer]
call rbx
jmp 0x14001ecfe
mov eax, 7
cpuid
shr ebx, 8
mov ecx, ebx
and ecx, 1
jmp 0x14001eece
mov rcx, rbp
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
jmp 0x14001ecd8
mov r8d, 0xea
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001edb3
mov r8d, 0xea
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ed5e
mov r8d, 0x357
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001f3ea
mov r8d, 0x1f5
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.ansiPath
call qword [sym.imp.msvcrt.dll__assert]
xor edx, edx
mov r9, r14
mov rcx, rbp
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r8, qword [rsp + 0xa0]
call rsi
test eax, eax
je 0x14001ece0
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, r14
call sub.msvcrt.dll_free
jmp 0x14001ece0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_access_unpacked_executable.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x14001f1c0
mov r8d, 0x2d7
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.res___INVALID_SET_FILE_POINTER
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ed8b
mov r8d, 0x2c8
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.res___INVALID_SET_FILE_POINTER
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ed07
mov r8d, 0xd5
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.dctx___NULL
mov qword [0x140040128], 0
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ef10
mov r8d, 0xce
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.input.src
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001edfc
mov r8d, 0xd2
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.output.dst
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ee16
lea rcx, str.Error__couldnt_runtime_expand_temporary_directory_pattern:
call sub.msvcrt.dll_puts
mov rcx, r14
call qword [sym.imp.msvcrt.dll__putws]
call sub.msvcrt.dll_abort
mov ecx, 2
call qword [fcn.140026e40]
lea r8, [0x14003a0c0]
lea rdx, str.Error__failed_to_open__ls_for_writing.
mov rcx, rax
call fcn.140002520
mov ecx, 2
call sub.msvcrt.dll_exit
mov r8d, 0x1e9
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.shortPath
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14001ec37
jmp 0x1400271b0
jmp 0x1400271b0
jmp 0x1400271b0
jmp 0x1400271b0
jmp 0x1400271b0
jmp 0x1400271b0
call sub.msvcrt.dll_abort
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp 0x1400016f0