Function at 0x14000b050
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x70], rax
call fcn.14000f588
call fcn.14000f590
call fcn.14000a7c0
test al, al
je 0x14000b7a6
mov edx, 1
lea rcx, [0x14000b020]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x14000b7ac
mov r8d, 0x1000
lea rdx, [0x140035e50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b7b9
lea rdx, [0x140035e50]
lea rcx, [rbp - 0x10]
call fcn.14000a460
movups xmm2, xmmword [rax]
movups xmmword [0x140032de8], xmm2
movups xmm0, xmmword [rax + 0x10]
movq rdx, xmm2
movups xmmword [0x140032df8], xmm0
movups xmm1, xmmword [rax + 0x20]
movups xmmword [0x140032e08], xmm1
test dl, dl
jne 0x14000b7bf
mov rax, qword [0x140032df8]
lea rdx, [0x140035e50]
mov qword [rsp + 0x1b8], rsi
mov r8d, 0x1000
mov qword [rsp + 0x180], r15
xor ecx, ecx
xor r15d, r15d
mov qword [0x140034e48], rax
mov esi, r15d
mov qword [0x140034e20], rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14000b7d0
mov qword [rsp + 0x1b0], rbx
lea rcx, [0x140035e50]
xor r8d, r8d
mov qword [rsp + 0x1c0], rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov ebx, eax
lea ecx, [rax + 1]
add rcx, rcx
call fcn.1400129f0
mov rdi, rax
test rax, rax
je 0x14000b7d6
mov r8d, ebx
lea rcx, [0x140035e50]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
je 0x14000b1f3
mov r9, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
xor r8d, r8d
lea rcx, [rsp + 0x58]
xor edx, edx
call fcn.140012948
test eax, eax
jne 0x14000b1f3
mov rcx, qword [rsp + 0x58]
call fcn.1400129f0
mov rbx, rax
test rax, rax
je 0x14000b7dc
mov r8, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
mov r9, rdi
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rdx, rax
call fcn.140012948
test eax, eax
je 0x14000b1f6
mov rcx, rbx
call fcn.1400124d4
mov rbx, r15
mov rcx, rdi
call fcn.1400124d4
test rbx, rbx
je 0x14000b254
xor r9d, r9d
mov dword [rsp + 0x20], 1
lea r8, [rbp - 0x10]
mov rcx, rbx
lea rdx, str.dont_search_path
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
je 0x14000b248
mov rax, qword [rbp + 8]
test rax, rax
je 0x14000b23e
cmp dword [rax + 0x84], 4
jbe 0x14000b23e
mov esi, dword [rax + 0xa8]
lea rcx, [rbp - 0x10]
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, rbx
call fcn.1400124d4
test esi, esi
jne 0x14000b25a
mov esi, dword [0x140032e08]
mov rax, qword [0x140034e20]
mov rcx, qword [0x140034e48]
movsxd r8, esi
mov rdx, r8
sub rdx, qword [r8 + rcx - 8]
sub rdx, 8
sub r8, rdx
add rcx, rdx
sub r8, 8
mov qword [0x140034e48], rcx
mov qword [0x140034e28], r8
movzx ecx, word [rax + rdx]
movzx r8d, byte [rax + rdx + 2]
add rax, 3
add rax, rdx
mov word [rsp + 0x50], cx
mov qword [0x140034e20], rax
cmp cl, 0x4b
jne 0x14000b7a0
cmp byte [rsp + 0x51], 0x41
jne 0x14000b7a0
cmp r8b, 0x59
jne 0x14000b7a0
mov ecx, 0x20003
call fcn.1400129f0
mov qword [0x140032dd0], rax
test rax, rax
je 0x14000b808
mov ecx, 0x20000
call fcn.1400129f0
mov qword [0x140034e30], rax
test rax, rax
je 0x14000b808
call fcn.140005330
mov qword [0x140032dc8], rax
test rax, rax
je 0x14000b808
mov qword [rsp + 0x198], r12
mov esi, 0x5c
mov qword [rsp + 0x190], r13
lea r12, [0x140030dc0]
mov qword [rsp + 0x188], r14
lea r13, [0x14002edb0]
mov byte [0x140032e18], 1
lea r14, [0x140035650]
mov edx, 2
lea rcx, [rsp + 0x50]
mov rbx, r14
lea rdi, [0x140034e50]
call fcn.14000ad50
movzx eax, word [rsp + 0x50]
mov word [0x140035650], ax
test ax, ax
je 0x14000b608
nop word [rax + rax]
mov edx, 2
lea rcx, [rsp + 0x50]
lea rbx, [rbx + 2]
call fcn.14000ad50
movzx eax, word [rsp + 0x50]
mov word [rbx], ax
test ax, ax
jne 0x14000b380
cmp word [0x140035650], r15w
je 0x14000b608
cmp word [0x140032e20], r15w
mov edx, 0x1000
mov word [0x140030dc0], r15w
mov rcx, r12
je 0x14000b3f2
lea r8, [0x140032e20]
sub r8, r12
cmp rdx, 1
jb 0x14000b7f4
movzx eax, word [r8 + rcx]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [r8 + rcx], r15w
jne 0x14000b3d2
mov word [rcx], r15w
mov rax, r12
cmp word [0x140030dc0], r15w
mov ecx, 0x1000
je 0x14000b427
nop dword [rax + rax]
add rax, 2
dec rcx
cmp word [rax], r15w
jne 0x14000b410
cmp rcx, 1
jb 0x14000b7f4
mov dword [rax], 0x5c
mov edx, 0x1000
cmp word [0x140030dc0], r15w
mov rax, r12
je 0x14000b44d
nop
add rax, 2
dec rdx
cmp word [rax], r15w
jne 0x14000b440
mov r8, r14
sub r8, rax
cmp rdx, 1
jb 0x14000b7f4
movzx ecx, word [rax + r8]
dec rdx
mov word [rax], cx
add rax, 2
cmp word [rax + r8], r15w
jne 0x14000b453
cmp word [0x140034e50], r15w
mov word [rax], r15w
jne 0x14000b4c4
cmp word [0x140030dc0], r15w
mov edx, 0x1000
mov rcx, rdi
je 0x14000b4c0
mov r8, r12
sub r8, rdi
nop dword [rax]
cmp rdx, 1
jb 0x14000b7f4
movzx eax, word [rcx + r8]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [rcx + r8], r15w
jne 0x14000b4a0
mov word [rcx], r15w
mov edx, 8
lea rcx, [rsp + 0x60]
call fcn.14000ad50
cmp word [0x140030dc0], r15w
mov edx, 0x1000
mov rdi, qword [rsp + 0x60]
mov rcx, r13
mov word [0x14002edb0], r15w
je 0x14000b520
mov r8, r12
sub r8, r13
nop dword [rax + rax]
cmp rdx, 1
jb 0x14000b7f4
movzx eax, word [rcx + r8]
dec rdx
mov word [rcx], ax
add rcx, 2
cmp word [rcx + r8], r15w
jne 0x14000b500
mov word [rcx], r15w
mov rbx, r13
movzx eax, word [0x14002edb0]
test ax, ax
je 0x14000b558
cmp ax, 0x5c
jne 0x14000b54b
xor edx, edx
mov word [rbx], r15w
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov word [rbx], si
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x14000b533
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], r15d
mov edx, 0x40000000
mov r8d, 2
mov dword [rsp + 0x20], 2
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14000b7ee
test rdi, rdi
je 0x14000b5fa
nop dword [rax]
nop word [rax + rax]
mov ebx, 0x8000
lea rcx, [0x140037e60]
cmp rdi, rbx
cmovbe ebx, edi
movsxd rsi, ebx
mov rdx, rsi
call fcn.14000ad50
lea r9, [rsp + 0x58]
mov dword [rsp + 0x58], r15d
mov r8d, ebx
mov qword [rsp + 0x20], r15
lea rdx, [0x140037e60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14000b7e2
sub rdi, rsi
jne 0x14000b5a0
mov esi, 0x5c
test rdi, rdi
jne 0x14000b7e8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000b345
mov rcx, qword [0x140032df8]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [0x140032e10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140032e00]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140005460
mov rcx, qword [0x140032dd0]
call fcn.1400124d4
mov rcx, qword [0x140034e30]
call fcn.1400124d4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8, [0x1400286e8]
mov edx, 0x80
mov r9d, eax
lea rcx, [rbp - 0x10]
call fcn.140001060
lea rdx, [rbp - 0x10]
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xorps xmm0, xmm0
mov dword [rbp - 0x80], 0x68
xor eax, eax
movups xmmword [rbp - 0x7c], xmm0
mov dword [rbp - 0x1c], eax
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000b7fa
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
mov qword [0x140032dc0], rcx
mov dword [rsp + 0x54], r15d
test rcx, rcx
je 0x14000b74a
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x140032dc0]
lea rdx, [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000b736
mov dword [rsp + 0x54], 1
mov rcx, qword [0x140032dc0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140032dc0], r15
call fcn.14000aee0
mov eax, dword [rsp + 0x54]
mov r14, qword [rsp + 0x188]
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1c0]
mov rbx, qword [rsp + 0x1b0]
mov rsi, qword [rsp + 0x1b8]
mov r15, qword [rsp + 0x180]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14000b820
add rsp, 0x1a0
pop rbp
ret
call fcn.14000ac70
int3
call fcn.14000ad20
int3
lea rcx, str.Error__failed_to_register_signal_handler.
call fcn.14000ab70
int3
call fcn.14000efe0
int3
mov rcx, qword [0x140032df0]
shr rdx, 0x20
call fcn.14000abf0
int3
call fcn.14000efe0
int3
call fcn.14000acb0
int3
call fcn.14000acb0
int3
call fcn.14000abb0
int3
call fcn.14000ac90
int3
call fcn.14000acf0
int3
call fcn.14000efe0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
call fcn.14000acd0
int3
call fcn.14000acb0
int3