Function at 0x1400099c0
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Read file on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
call sub.msvcrt.dll_abort
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x118
lea r12, [0x14001c0c0]
call fcn.1400021b7
xor ecx, ecx
mov r8d, 0x1000
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140009bd0
lea r13, str._TEMP_onefile__PID___TIME_
mov r8d, 0x1000
lea rcx, [0x14001e0e0]
mov rdx, r13
call fcn.140001c90
test al, al
je 0x14000a177
mov edx, 1
lea rcx, [0x1400019c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x140009bab
mov rax, qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
lea rcx, [0x14001e0e0]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r9d, r9d
mov rcx, r12
mov byte [0x14001e0c0], 1
mov r8d, 1
mov edx, 0x80000000
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov qword [rsp + 0x50], rax
call rax
mov qword [0x1400200e0], rax
add rax, 1
je 0x14000a161
xor r8d, r8d
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov rcx, r12
call rsi
lea rbp, [rsp + 0x90]
lea ecx, [rax + 1]
mov ebx, eax
add rcx, rcx
call sub.msvcrt.dll_malloc
mov r8d, ebx
mov rcx, r12
mov r13, rax
mov rdx, rax
call rsi
test eax, eax
je 0x14000a154
xor r8d, r8d
xor edx, edx
mov rbx, qword [sym.imp.msvcrt.dll_wcstombs_s]
mov r9, r13
mov qword [rsp + 0x20], 0xffffffffffffffff
mov rcx, rbp
call rbx
test eax, eax
jne 0x14000a154
mov rsi, qword [rsp + 0x90]
mov rcx, rsi
call sub.msvcrt.dll_malloc
mov r9, r13
mov r8, rsi
mov rcx, rbp
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r12, rax
mov rdx, rax
call rbx
test eax, eax
jne 0x14000a14c
test r12, r12
je 0x140009bf4
xor r9d, r9d
mov r8, rbp
lea rdx, str.dont_search_path
mov rcx, r12
mov dword [rsp + 0x20], 1
call qword [sym.imp.imagehlp.dll_MapAndLoad]
test eax, eax
je 0x140009bec
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x140009be3
cmp dword [rax + 0x84], 4
jbe 0x140009be3
mov ebx, dword [rax + 0xa8]
mov rcx, rbp
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, r12
call sub.msvcrt.dll_free
test ebx, ebx
je 0x140009bf4
lea edx, [rbx - 8]
mov rcx, qword [0x1400200e0]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.KERNEL32.dll_SetFilePointer]
call rbx
jmp 0x140009c12
lea rcx, str.Error__failed_to_register_signal_handler.
call fcn.140001800
mov eax, 1
add rsp, 0x118
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str.Error__failed_to_locate_onefile_filename.
call fcn.140001800
mov eax, 1
jmp 0x140009bbc
mov rcx, rbp
call qword [sym.imp.imagehlp.dll_UnMapAndLoad]
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, qword [0x1400200e0]
mov rbx, qword [sym.imp.KERNEL32.dll_SetFilePointer]
xor r8d, r8d
mov edx, 0xfffffff8
mov r9d, 2
call rbx
lea r14, [rsp + 0x70]
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400200e0]
lea r13, [0x1400200e0]
call rbx
mov rcx, qword [0x1400200e0]
mov r9, r14
mov rdx, rbp
mov rsi, qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8d, 8
mov qword [rsp + 0x20], 0
call rsi
mov edx, dword [rsp + 0x90]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x1400200e0]
call rbx
lea rdx, [rsp + 0x69]
mov r9, rbp
mov r8d, 3
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1400200e0]
call rsi
nop dword [rax]
lea rbx, [0x1400110c0]
jmp 0x140009ca4
add rbx, 2
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1400200e0]
mov r9, rbp
mov rdx, r14
mov r8d, 2
call rsi
movzx eax, word [rsp + 0x70]
mov word [rbx], ax
test ax, ax
jne 0x140009ca0
lea rax, [0x1400110c0]
movzx eax, word [rax]
test ax, ax
je 0x14000a01a
lea rbx, [0x1400110c0]
lea r12, [0x14001a0c0]
lea rdi, [0x14001e0e0]
movzx edx, word [rdi]
cmp ax, 0x5c
je 0x140009ee8
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x140009cf0
lea rax, [0x14001e0e0]
xor r8d, r8d
lea rdx, [0x14001a0c0]
movzx ecx, word [rax]
mov word [0x14001a0c0], r8w
test cx, cx
jne 0x140009d41
jmp 0x140009d54
cmp rax, r13
je 0x1400099b0
add rax, 2
mov word [rdx], cx
add rdx, 2
movzx ecx, word [rax]
test cx, cx
jne 0x140009d38
xor ecx, ecx
mov word [rdx], cx
cmp word [0x14001a0c0], 0
je 0x14000a118
mov edx, 0x1000
lea rax, [0x14001a0c0]
nop dword [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140009d78
test rdx, rdx
je 0x14000a1c2
mov dword [rax], 0x5c
lea rax, [0x1400110c0]
mov edx, 0x1000
cmp word [0x14001a0c0], 0
movzx ecx, word [rax]
lea rax, [0x14001a0c0]
je 0x14000a124
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140009dc0
test cx, cx
je 0x140009e09
test rdx, rdx
je 0x14000a1c7
lea r8, [0x1400110c0]
jmp 0x140009df1
test rdx, rdx
je 0x14000a1cc
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x140009de8
xor edx, edx
cmp word [0x1400198c0], 0
mov word [rax], dx
je 0x14000a000
mov rcx, r12
mov rax, qword [rsp + 0x50]
xor r9d, r9d
mov edx, 0x40000000
mov qword [rsp + 0x30], 0
mov r8d, 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
call rax
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14000a191
mov qword [rsp + 0x20], 0
mov rcx, qword [0x1400200e0]
mov r9, r14
mov rdx, rbp
mov r8d, 8
lea rdi, [0x1400118c0]
call rsi
mov r15, qword [rsp + 0x90]
test r15, r15
je 0x140009ed7
nop dword [rax]
mov ebx, 0x8000
mov rcx, qword [0x1400200e0]
mov r9, rbp
mov rdx, rdi
mov qword [rsp + 0x20], 0
cmp r15, rbx
cmovbe rbx, r15
mov r8d, ebx
call rsi
xor r9d, r9d
mov r8d, ebx
mov rdx, rdi
mov qword [rsp + 0x20], 0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub r15, rbx
jne 0x140009e90
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140009c90
xor eax, eax
xor r15d, r15d
lea rcx, [0x14001a0c0]
mov word [0x14001a0c0], ax
mov rax, rdi
mov word [rbx], r15w
test dx, dx
jne 0x140009f19
jmp 0x140009f2c
cmp rax, r13
je 0x1400099b0
add rax, 2
mov word [rcx], dx
add rcx, 2
movzx edx, word [rax]
test dx, dx
jne 0x140009f10
xor r11d, r11d
mov word [rcx], r11w
cmp word [r12], 0
je 0x14000a140
mov edx, 0x1000
lea rax, [0x14001a0c0]
nop dword [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140009f50
test rdx, rdx
je 0x14000a1bd
mov dword [rax], 0x5c
lea rax, [0x1400110c0]
mov edx, 0x1000
cmp word [r12], 0
movzx ecx, word [rax]
lea rax, [0x14001a0c0]
je 0x14000a132
nop
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x140009f90
test cx, cx
je 0x140009fd9
test rdx, rdx
je 0x14000a1d1
lea r8, [0x1400110c0]
jmp 0x140009fc1
test rdx, rdx
je 0x14000a1d6
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x140009fb8
xor r9d, r9d
mov r10d, 0x5c
xor edx, edx
mov rcx, r12
mov word [rax], r9w
mov rax, qword [rsp + 0x58]
mov word [rbx], r10w
call rax
jmp 0x140009d04
mov r8d, 0x1000
mov rdx, r12
lea rcx, [0x1400198c0]
call fcn.140001b10
jmp 0x140009e1c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, pe_nt_image_headers64
mov rcx, rbp
mov rdi, rbp
mov r9d, eax
lea r8, [0x14000c0ca]
call fcn.1400017e0
mov rdx, rbp
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor eax, eax
mov ecx, 0x1a
rep stosd dword [rdi], eax
mov dword [rsp + 0x90], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x48], r14
mov rdx, rax
lea rcx, [0x1400198c0]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rsp + 0x78]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x70]
mov dword [rsp + 0x6c], 0
mov qword [0x1400110a0], rcx
test rcx, rcx
je 0x14000a10a
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x1400110a0]
lea rdx, [rsp + 0x6c]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000a0f6
mov dword [rsp + 0x6c], 1
mov rcx, qword [0x1400110a0]
call rbx
mov qword [0x1400110a0], 0
call fcn.140001890
mov eax, dword [rsp + 0x6c]
jmp 0x140009bbc
lea rax, [0x14001a0c0]
jmp 0x140009d8f
test cx, cx
jne 0x140009ddc
jmp 0x140009e09
test cx, cx
jne 0x140009fac
jmp 0x140009fd9
lea rax, [0x14001a0c0]
jmp 0x140009f67
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, r13
call sub.msvcrt.dll_free
jmp 0x140009bf4
lea rcx, str.Error__failed_to_access_unpacked_executable.
call fcn.140001800
mov eax, 1
jmp 0x140009bbc
lea rcx, str.Error__couldnt_runtime_expand_temporary_directory_pattern:
call sub.msvcrt.dll_puts
mov rcx, r13
call qword [sym.imp.msvcrt.dll__putws]
call sub.msvcrt.dll_abort
mov ecx, 2
call qword [fcn.140009650]
lea r8, [0x14001a0c0]
lea rdx, str.Error__failed_to_open__ls_for_writing.
mov rcx, rax
call fcn.140001860
mov ecx, 2
call sub.msvcrt.dll_exit
nop
jmp 0x1400099b0
jmp 0x1400099b0
jmp 0x1400099b0
jmp 0x1400099b0
jmp 0x1400099b0
jmp 0x1400099b0