Function at 0x1400b56e0
Capabilities:
Create thread
Query environment variable
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x238
lea r15, [0x14014ce3e]
lea r14, [0x14014ce4c]
xor ebx, ebx
mov r12d, ecx
mov rcx, r15
mov r13, rdx
call fcn.1400b54d0
mov rdi, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea rdx, [0x14014ce48]
mov rcx, r15
mov qword [0x14016b418], rax
mov qword [rsp + 0x30], rdi
call rdi
mov rcx, r14
call fcn.1400b54d0
call fcn.1400cf730
mov rcx, r14
mov rdx, rax
call rdi
call fcn.1400cf730
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov r14, qword [sym.imp.python311.dll_PyImport_FrozenModules]
mov rsi, qword [r14]
test rsi, rsi
je 0x1400b5784
cmp qword [rsi], 0
mov rax, rsi
je 0x1400b577a
nop dword [rax + rax]
add rax, 0x20
cmp qword [rax], 0
jne 0x1400b5770
sub rax, rsi
mov rbx, rax
sar rbx, 5
lea ecx, [rbx + 0x9c]
movsxd rbx, ebx
lea rbp, str.__multiprocessing_resource_tracker
movsxd rcx, ecx
shl rbx, 5
shl rcx, 5
call sub.msvcrt.dll_malloc
mov r8, rbx
mov rdx, rsi
lea rsi, [r13 + 8]
mov rdi, rax
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rcx, [rdi + rbx]
mov ebx, 1
call fcn.1400019a0
mov rax, qword [r14]
mov rcx, qword [r13]
mov qword [r14], rdi
mov qword [0x14016b430], r13
lea rdi, str.__multiprocessing_fork
mov qword [0x14016b420], rax
mov rax, qword [sym.imp.python311.dll_Py_DebugFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_InspectFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_InteractiveFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_OptimizeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_DontWriteBytecodeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_NoUserSiteDirectory]
mov dword [rax], 1
mov rax, qword [sym.imp.python311.dll_Py_IgnoreEnvironmentFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_VerboseFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_BytesWarningFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_UTF8Mode]
mov dword [rax], 0
mov rax, qword [sym.imp.python311.dll_Py_FrozenFlag]
mov dword [rax], 1
mov rax, qword [sym.imp.python311.dll_Py_NoSiteFlag]
mov dword [rax], 1
call qword [sym.imp.python311.dll_Py_SetProgramName]
mov dword [0x14016b428], r12d
cmp r12d, 1
jle 0x1400b58cf
nop dword [rax]
mov rcx, qword [rsi]
mov rdx, rdi
add ebx, 1
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x1400b58b3
cmp r12d, ebx
jg 0x1400b5d46
mov rcx, qword [rsi]
mov rdx, rbp
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x1400b5c60
cmp r12d, ebx
jg 0x1400b5d88
lea rbp, [rsp + 0x60]
mov rcx, rbp
call qword [sym.imp.python311.dll__PyRuntime_Initialize]
mov edx, dword [rsp + 0x60]
test edx, edx
jne 0x1400b5de2
lea r13, [rsp + 0x80]
lea rbx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.python311.dll__PyConfig_InitCompatConfig]
mov r9, qword [0x14016b430]
mov rdx, r13
mov rcx, rbx
movsxd r8, dword [0x14016b428]
call qword [sym.imp.python311.dll_PyConfig_SetArgv]
call fcn.1400cf730
mov rdi, qword [sym.imp.python311.dll_PyConfig_SetString]
mov rdx, r13
mov rcx, rbx
mov rsi, rax
mov rax, qword [0x14016b430]
lea r8, [rsp + 0x1d0]
mov r9, qword [rax]
call rdi
mov r9, rsi
lea r8, [rsp + 0x1e0]
mov rdx, r13
mov rcx, rbx
call rdi
mov r9, rsi
lea r8, [rsp + 0x1f0]
mov rdx, r13
mov rcx, rbx
call rdi
mov r9, rsi
lea r8, [rsp + 0x1e8]
mov rdx, r13
mov rcx, rbx
call rdi
mov r9, rsi
lea r8, [rsp + 0x1f8]
mov rdx, r13
mov rcx, rbx
call rdi
mov r9, rsi
lea r8, [rsp + 0x1a0]
mov rdx, r13
mov rcx, rbx
call rdi
mov r9, rsi
lea r8, [rsp + 0x1a8]
mov rdx, r13
mov rcx, rbx
call rdi
lea rdx, [rsp + 0x1b8]
mov r8, rsi
mov rcx, rbx
call qword [sym.imp.python311.dll_PyWideStringList_Append]
mov rdx, r13
mov rcx, rbp
mov dword [rsp + 0x1b0], 1
mov dword [rsp + 0x90], 1
call qword [sym.imp.python311.dll_Py_InitializeFromConfig]
mov eax, dword [rsp + 0x60]
test eax, eax
jne 0x1400b5de7
mov rax, qword [sym.imp.python311.dll_Py_NoSiteFlag]
mov rdx, qword [0x14016b430]
mov ecx, r12d
lea rbp, [0x14014cee9]
mov dword [rax], 1
call qword [sym.imp.python311.dll_PySys_SetArgv]
call fcn.1400f33b0
call fcn.140001810
call fcn.140003140
call fcn.1400d62c0
call fcn.1400c9c70
call fcn.1400c9460
call fcn.1400c9360
call fcn.1400c9410
call fcn.1400c9990
call fcn.1400f47e0
call fcn.1400f46f0
call fcn.1400cf6c0
call fcn.140133380
call fcn.140139050
mov rbx, qword [sym.imp.python311.dll_PyUnicode_FromString]
lea rcx, [0x14014cede]
call rbx
lea rcx, str.NUL:
mov r12, rax
call rbx
mov rdi, qword [sym.imp.python311.dll_PySys_GetObject]
mov rcx, rbp
mov rbx, rax
call rdi
mov rsi, qword [sym.imp.python311.dll__Py_NoneStruct]
cmp rax, rsi
je 0x1400b5d09
test rax, rax
je 0x1400b5d09
lea rbp, [0x14014cef1]
mov rcx, rbp
call rdi
cmp rax, rsi
je 0x1400b5ccf
test rax, rax
je 0x1400b5ccf
lea rbp, [0x14014cefa]
mov rcx, rbp
call rdi
test rax, rax
je 0x1400b5c99
cmp rax, rsi
je 0x1400b5c99
sub qword [rbx], 1
je 0x1400b5c72
test r12, r12
je 0x1400b5afa
sub qword [r12], 1
je 0x1400b5c8c
call fcn.140132970
call fcn.140132d00
mov rax, qword [0x14016b420]
mov qword [r14], rax
call fcn.140001940
call qword [sym.imp.python311.dll__PyWarnings_Init]
call fcn.140133070
mov rsi, qword [0x14016b418]
call fcn.1400cae60
lea rdx, str.environ
mov rbx, qword [sym.imp.python311.dll_PyObject_GetAttrString]
mov rcx, rax
call rbx
mov rdx, 0xffffffffffffffff
mov rcx, r15
mov r12, rax
call sub.python311.dll_PyUnicode_FromWideChar
mov r14, rax
test rsi, rsi
je 0x1400b5d52
mov rcx, r15
mov rdx, rsi
mov rax, qword [rsp + 0x30]
call rax
or rdx, 0xffffffffffffffff
mov rcx, rsi
call sub.python311.dll_PyUnicode_FromWideChar
mov rdx, r14
mov rcx, r12
mov r15, rax
mov r8, rax
call qword [sym.imp.python311.dll_PyObject_SetItem]
test eax, eax
jne 0x1400b5d72
sub qword [r15], 1
jne 0x1400b5b9c
mov rcx, r15
call fcn.1400b55b0
sub qword [r14], 1
jne 0x1400b5baa
mov rcx, r14
call fcn.1400b55b0
sub qword [r12], 1
je 0x1400b5c7f
cmp byte [0x14016b410], 0
jne 0x1400b5e06
cmp qword [0x14016b408], 0
jne 0x1400b5e1e
xor eax, eax
mov ecx, 0x1c
mov r8d, pe_nt_image_headers64
mov rdx, r13
lea rdi, [rsp + 0x90]
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
rep stosd dword [rdi], eax
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
sub eax, 1
cmp eax, 0x7d
jbe 0x1400b5daa
mov rax, qword [sym.imp.python311.dll__PyRuntime]
lea r12, [0x14014cf5c]
mov rdx, r12
mov rax, qword [rax + 0x1f8]
mov rax, qword [rax + 0x10]
mov rcx, qword [rax + 0x378]
call qword [sym.imp.python311.dll_PyDict_DelItemString]
mov rcx, r12
call fcn.1401323a0
call fcn.1400b5520
mov ecx, eax
call qword [sym.imp.python311.dll_Py_Exit]
nop dword [rax]
add rsi, 8
cmp r12d, ebx
jne 0x1400b5898
jmp 0x1400b58cf
mov rcx, rbx
call fcn.1400b55b0
jmp 0x1400b5aea
mov rcx, r12
call fcn.1400b55b0
jmp 0x1400b5bb5
mov rcx, r12
call fcn.1400b55b0
jmp 0x1400b5afa
mov r9, r12
xor r8d, r8d
lea rdx, [0x14014cef8]
mov rcx, rbx
call fcn.1401055c0
mov rcx, rbp
mov rsi, rax
mov rdx, rax
call qword [sym.imp.python311.dll_PySys_SetObject]
mov rdx, rsi
mov ecx, 0xfffffff4
call fcn.1400b5640
jmp 0x1400b5ae0
mov r9, r12
xor r8d, r8d
lea rdx, [0x14014cef8]
mov rcx, rbx
call fcn.1401055c0
mov rcx, rbp
mov qword [rsp + 0x38], rax
mov rdx, rax
call qword [sym.imp.python311.dll_PySys_SetObject]
mov rdx, qword [rsp + 0x38]
mov ecx, 0xfffffff5
call fcn.1400b5640
jmp 0x1400b5ac2
mov r9, r12
mov r8d, 1
mov rcx, rbx
lea rdx, [0x14014ceef]
call fcn.1401055c0
mov rcx, rbp
mov qword [rsp + 0x38], rax
mov rdx, rax
call qword [sym.imp.python311.dll_PySys_SetObject]
mov rdx, qword [rsp + 0x38]
mov ecx, 0xfffffff6
call fcn.1400b5640
jmp 0x1400b5aa4
mov byte [0x14016b410], 1
jmp 0x1400b58cf
xor edx, edx
mov rcx, r15
mov rax, qword [rsp + 0x30]
call rax
mov rdx, r14
mov rcx, r12
call qword [sym.imp.python311.dll_PyObject_DelItem]
test eax, eax
je 0x1400b5b9c
mov ecx, 1
call qword [sym.imp.python311.dll_PyErr_PrintEx]
mov ecx, 1
call qword [sym.imp.python311.dll_Py_Exit]
movsxd rbx, ebx
mov rcx, qword [r13 + rbx*8]
call qword [sym.imp.msvcrt.dll__wtoi]
mov ecx, eax
call qword [sym.imp.python311.dll_PyLong_FromLong]
mov qword [0x14016b408], rax
jmp 0x1400b58cf
mov rcx, r13
call sub.msvcrt.dll_atol
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
lea r8, [0x1400b5430]
mov dword [rsp + 0x20], 0
mov dword [0x14016b404], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1400b5c1b
lea rbx, [rsp + 0x40]
movdqa xmm0, xmmword [rsp + 0x60]
movdqa xmm1, xmmword [rsp + 0x70]
mov rcx, rbx
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
call qword [sym.imp.python311.dll_Py_ExitStatusException]
lea rcx, str.__parents_main__
call fcn.1401323a0
call fcn.1400b5520
mov ecx, eax
call sub.msvcrt.dll_exit
lea rcx, str.multiprocessing.resource_tracker
call fcn.1401323a0
lea rdx, [0x14014cf41]
mov rcx, rax
call rbx
mov rdx, qword [0x14016b408]
mov rcx, rax
call fcn.1400f0550
call fcn.1400b5520
mov ecx, eax
call sub.msvcrt.dll_exit
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rcx, qword [rcx + 0x88]
mov rdi, rdx
mov rbp, r8
test rcx, rcx
je 0x1400b5e86
mov rdx, r8
call rdi
test eax, eax
jne 0x1400b5ec0
mov rax, qword [rsi + 0xd0]
xor ebx, ebx
test rax, rax
jle 0x1400b5ebe
nop dword [rax]
mov rcx, qword [rsi + rbx*8 + 0xd8]
test rcx, rcx
je 0x1400b5eb5
mov rdx, rbp
call rdi
test eax, eax
jne 0x1400b5ec0
mov rax, qword [rsi + 0xd0]
add rbx, 1
cmp rbx, rax
jl 0x1400b5e98
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret