Function at 0x41dfe0
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Read file on windows
Set environment variable
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r12
push rsi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x80]
lea rcx, str.libgcc_s_dw2_1.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
test rax, rax
je 0x401750
lea rcx, str.libgcc_s_dw2_1.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.__register_frame_info
mov rcx, r12
mov qword [0x00430040], rax
call rsi
lea rdx, str.__deregister_frame_info
mov rcx, r12
mov rbx, rax
call rsi
mov qword [0x00427010], rax
test rbx, rbx
jne 0x401765
lea rcx, [0x00401780]
add rsp, 0x28
pop rbx
pop rsi
pop r12
pop rbp
jmp fcn.00401680
lea rax, [0x004016c0]
lea rbx, [0x004016b0]
mov qword [0x00427010], rax
lea rdx, [0x00430060]
lea rcx, [section..eh_fram]
call rbx
jmp 0x401738
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x128
call qword [0x00427100]
xor ecx, ecx
mov r8d, 0x1000
lea rdx, [0x0043b0c0]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x41e848
mov r8d, 0x1000
lea rdx, str._TEMP_onefile__PID___TIME_
lea rcx, [0x0043d0e0]
call fcn.0041dcf0
test al, al
je 0x41eaee
mov edx, 1
lea rcx, [0x00403d90]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
je 0x41e557
mov rax, qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
lea rcx, [0x0043d0e0]
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r9d, r9d
lea rcx, [0x0043b0c0]
mov byte [0x0043d0c0], 1
mov r8d, 1
mov edx, 0x80000000
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov qword [rsp + 0x58], rax
call rax
mov qword [0x0043f130], rax
mov rcx, rax
cmp rax, 0xffffffffffffffff
je 0x41ea0a
xor r8d, r8d
mov r9d, 2
mov edx, 0xfffffff8
mov rbx, qword [sym.imp.KERNEL32.dll_SetFilePointer]
call rbx
cmp eax, 0xffffffff
je 0x41ea67
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x0043f130]
mov r9d, 1
call rbx
lea rbp, [rsp + 0xa0]
mov rcx, qword [0x0043f130]
mov qword [rsp + 0x20], 0
mov eax, eax
mov rsi, qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8d, 8
mov rdx, rbp
mov qword [0x0043f0e0], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x68], rax
mov r9, rax
call rsi
test eax, eax
je 0x41e9cc
cmp dword [rsp + 0x80], 8
jne 0x41e97a
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0xa0]
mov rcx, qword [0x0043f130]
call rbx
cmp eax, 0xffffffff
je 0x41ea86
mov rcx, qword [0x0043f130]
lea rdx, [rsp + 0x79]
mov r9, rbp
mov qword [rsp + 0x20], 0
mov r8d, 3
call rsi
test eax, eax
je 0x41e9ad
cmp dword [rsp + 0xa0], 3
jne 0x41e953
cmp byte [rsp + 0x79], 0x4b
jne 0x41e92c
cmp byte [rsp + 0x7a], 0x41
jne 0x41e905
cmp byte [rsp + 0x7b], 0x59
jne 0x41e8e6
mov ecx, 0x20003
call sub.msvcrt.dll_malloc
mov qword [0x0043f110], rax
test rax, rax
je 0x41eb37
mov ecx, 0x20000
call sub.msvcrt.dll_malloc
mov qword [0x0043f0f0], rax
test rax, rax
je 0x41eacf
mov ecx, 0x274b8
call sub.msvcrt.dll_malloc
mov r8, rax
test rax, rax
je 0x41eaa5
mov qword [rax + 0x73b0], 0
pxor xmm0, xmm0
mov qword [rax + 0x73c8], 0
mov qword [rax + 0x72d8], 0
mov qword [rax + 0x73ec], 0
mov qword [rax + 0x73f8], 0
mov qword [rax + 0x7400], 0
mov qword [rax + 0x7420], 0
mov dword [rax + 0x73f4], 0
mov qword [rax + 0x7440], 0
mov dword [rax + 0x7448], 0
mov dword [rax + 0x7454], 0
mov qword [rax + 0x274b0], 0
movups xmmword [rax + 0x73a0], xmm0
movups xmmword [rax + 0x73d8], xmm0
xor eax, eax
cpuid
xor ecx, ecx
cmp eax, 6
ja 0x41e999
mov dword [r8 + 0x73d0], ecx
mov qword [r8 + 0x7410], 0x8000001
mov dword [r8 + 0x7458], 0
mov qword [r8 + 0x7388], 0
mov dword [r8 + 0x7390], 1
mov qword [0x0043f128], r8
lea rdi, [0x0043f0e0]
nop
lea rbx, [0x004300c0]
jmp 0x41e304
add rbx, 2
mov edx, 2
mov rcx, rbp
call fcn.0041cd30
movzx eax, word [rsp + 0xa0]
mov word [rbx], ax
test ax, ax
jne 0x41e300
lea rax, [0x004300c0]
movzx edx, word [rax]
test dx, dx
je 0x41e730
movzx eax, word [0x0043d0e0]
lea rsi, [0x0043d0e0]
lea rbx, [0x004300c0]
lea r12, [0x004390c0]
cmp dx, 0x5c
je 0x41e5c8
movzx edx, word [rbx + 2]
add rbx, 2
test dx, dx
jne 0x41e350
xor r9d, r9d
lea rcx, [0x004390c0]
lea rdx, [0x0043d0e0]
mov word [0x004390c0], r9w
test ax, ax
jne 0x41e399
jmp 0x41e3ac
cmp rdx, rdi
je 0x426490
add rdx, 2
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
test ax, ax
jne 0x41e390
xor r8d, r8d
mov word [rcx], r8w
cmp word [0x004390c0], 0
je 0x41e8c0
mov edx, 0x1000
lea rax, [0x004390c0]
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x41e3d0
test rdx, rdx
je 0x41eb5b
mov dword [rax], 0x5c
lea rax, [0x004300c0]
mov edx, 0x1000
cmp word [0x004390c0], 0
movzx ecx, word [rax]
lea rax, [0x004390c0]
je 0x41e8a8
nop dword [rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x41e418
test cx, cx
je 0x41e461
test rdx, rdx
je 0x41eb60
lea r8, [0x004300c0]
jmp 0x41e449
test rdx, rdx
je 0x41eb65
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x41e440
xor edx, edx
cmp word [0x004388c0], 0
mov word [rax], dx
je 0x41e6e0
mov dword [rsp + 0x28], 0
mov rax, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 2
mov qword [rsp + 0x30], 0
mov edx, 0x40000000
lea rcx, [0x004390c0]
mov dword [rsp + 0x20], 2
call rax
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x41eb0c
mov edx, 8
mov rcx, rbp
mov r13d, 0x8000
call fcn.0041cd30
mov r15, qword [rsp + 0xa0]
mov r14, qword [sym.imp.KERNEL32.dll_WriteFile]
lea rsi, [0x004308c0]
test r15, r15
jne 0x41e4f5
jmp 0x41e549
sub r15, rbx
je 0x41e549
cmp r15, 0x8000
mov rbx, r13
mov rcx, rsi
cmovbe rbx, r15
mov rdx, rbx
call fcn.0041cd30
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
mov qword [rsp + 0x20], 0
mov rcx, r12
call r14
test eax, eax
jne 0x41e4f0
mov r8d, 0x9c
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
sub r15, rbx
jne 0x41e4f5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41e2f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_register_signal_handler.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
add rsp, 0x128
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor r14d, r14d
xor r15d, r15d
lea rcx, [0x004390c0]
mov word [rbx], r14w
lea rdx, [0x0043d0e0]
mov word [0x004390c0], r15w
test ax, ax
jne 0x41e5f9
jmp 0x41e60c
cmp rdx, rdi
je 0x426490
add rdx, 2
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
test ax, ax
jne 0x41e5f0
xor r13d, r13d
mov word [rcx], r13w
cmp word [r12], 0
je 0x41e8da
mov edx, 0x1000
lea rax, [0x004390c0]
nop dword [rax + rax]
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x41e630
test rdx, rdx
je 0x41eb6a
mov dword [rax], 0x5c
lea rax, [0x004300c0]
mov edx, 0x1000
cmp word [r12], 0
movzx ecx, word [rax]
lea rax, [0x004390c0]
je 0x41e8cc
nop
add rax, 2
sub rdx, 1
cmp word [rax], 0
jne 0x41e670
test cx, cx
je 0x41e6b9
test rdx, rdx
je 0x41eb6f
lea r8, [0x004300c0]
jmp 0x41e6a1
test rdx, rdx
je 0x41eb56
add r8, 2
mov word [rax], cx
add rax, 2
sub rdx, 1
movzx ecx, word [r8]
test cx, cx
jne 0x41e698
xor r10d, r10d
mov r11d, 0x5c
xor edx, edx
mov rcx, r12
mov word [rax], r10w
mov rax, qword [rsp + 0x60]
mov word [rbx], r11w
call rax
movzx eax, word [rsi]
jmp 0x41e35a
movzx ecx, word [0x004390c0]
lea rax, [0x004390c0]
lea rdx, [0x004388c0]
lea r8, [rax + 0x2000]
test cx, cx
jne 0x41e711
jmp 0x41e724
cmp rax, r8
je 0x426490
add rax, 2
mov word [rdx], cx
add rdx, 2
movzx ecx, word [rax]
test cx, cx
jne 0x41e708
xor eax, eax
mov word [rdx], ax
jmp 0x41e474
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, pe_nt_image_headers64
mov rcx, rbp
mov rdi, rbp
mov r9d, eax
lea r8, [0x00429a88]
call fcn.00402370
mov rdx, rbp
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor eax, eax
mov ecx, 0xd
rep stosq qword [rdi], rax
mov dword [rsp + 0xa0], 0x68
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x40], rbp
mov rdx, rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], 0
lea rcx, [0x004388c0]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x41e9eb
mov rcx, qword [rsp + 0x88]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x80]
mov dword [rsp + 0x7c], 0
xor eax, eax
mov qword [0x004300a0], rcx
test rcx, rcx
je 0x41e5af
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x004300a0]
lea rdx, [rsp + 0x7c]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x41e826
mov dword [rsp + 0x7c], 1
mov rcx, qword [0x004300a0]
call rbx
mov eax, dword [rsp + 0x7c]
mov qword [0x004300a0], 0
jmp 0x41e5af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_locate_onefile_filename.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x41e5af
test cx, cx
jne 0x41e434
jmp 0x41e461
lea rax, [0x004390c0]
jmp 0x41e3e7
test cx, cx
jne 0x41e68c
jmp 0x41e6b9
lea rax, [0x004390c0]
jmp 0x41e647
mov r8d, 0x29e
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_2___Y
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e1c2
mov r8d, 0x29a
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_1___A
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x7b], 0x59
je 0x41e1c2
jmp 0x41e8e6
mov r8d, 0x299
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.header_0___K
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x7a], 0x41
je 0x41e1b7
jmp 0x41e905
mov r8d, 0xe5
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.read_size__size
call qword [sym.imp.msvcrt.dll__assert]
cmp byte [rsp + 0x79], 0x4b
je 0x41e1ac
jmp 0x41e92c
mov r8d, 0xe5
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.read_size__size
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e14c
mov eax, 7
cpuid
shr ebx, 8
mov ecx, ebx
and ecx, 1
jmp 0x41e2ae
mov r8d, 0xe4
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e193
mov r8d, 0xe4
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e13e
mov r8d, 0x30d
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.bool_res
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e7ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0x400
xor edx, edx
mov ecx, 0x1300
mov r8d, eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
lea rcx, str.Error__failed_to_access_unpacked_executable.
call sub.msvcrt.dll_puts
mov rcx, qword [rsp + 0xa0]
call sub.msvcrt.dll_puts
mov eax, 1
jmp 0x41e5af
mov r8d, 0x282
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.res___INVALID_SET_FILE_POINTER
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e0df
mov r8d, 0x291
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.res___INVALID_SET_FILE_POINTER
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e16b
mov r8d, 0xcf
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.dctx___NULL
mov qword [0x0043f128], 0
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e2e8
mov r8d, 0xcc
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.output.dst
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e1f6
lea rcx, str.Error__couldnt_runtime_expand_temporary_directory_pattern:
call sub.msvcrt.dll_puts
lea rcx, str._TEMP_onefile__PID___TIME_
call qword [sym.imp.msvcrt.dll__putws]
call sub.msvcrt.dll_abort
mov ecx, 2
call qword [fcn.00426120]
lea r8, [0x004390c0]
lea rdx, str.Error__failed_to_open__ls_for_writing.
mov rcx, rax
call fcn.004024e0
mov ecx, 2
call sub.msvcrt.dll_exit
mov r8d, 0xc8
lea rdx, str.static_srcOnefileBootstrap.c
lea rcx, str.input.src
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x41e1dc
jmp 0x426490
jmp 0x426490
jmp 0x426490
jmp 0x426490
jmp 0x426490
jmp 0x426490
call sub.msvcrt.dll_abort
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp 0x4016d0