Function at 0x1400028b0
Capabilities:
Create thread
Query environment variable
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x100a8
call fcn.140021cd0
sub rsp, rax
mov rax, qword [0x1400523e8]
xor rax, rsp
mov qword [rsp + 0x100a0], rax
call fcn.140023d34
mov esi, dword [rax]
call fcn.140023d3c
mov r12, qword [rax]
mov word [rsp + 0xa0], 0
mov word [rsp + 0x50], 0
lea rdx, [0x1400451c2]
lea rdi, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rdi
call fcn.1400101c0
lea rdx, [rsp + 0xa0]
mov rcx, rdi
mov r8d, 0x10000
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
add eax, 0xfffeffff
cmp eax, 0xffff0000
jae 0x14000293c
xor eax, eax
jmp 0x140002949
lea rcx, [rsp + 0xa0]
call fcn.140028adc
mov qword [0x140053d80], rax
mov word [rsp + 0xa0], 0
lea rdx, [0x1400451c2]
lea rdi, [rsp + 0xa0]
mov r8d, 0x28
mov rcx, rdi
call fcn.1400101c0
lea rdx, [0x140046722]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov word [rsp + 0xa0], 0
mov word [rsp + 0x50], 0
lea rdx, str.PYTHONHOME
lea rdi, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rdi
call fcn.1400101c0
lea rdx, [rsp + 0xa0]
mov rcx, rdi
mov r8d, 0x10000
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
add eax, 0xfffeffff
xor r14d, r14d
cmp eax, 0xffff0000
jae 0x1400029dc
xor eax, eax
jmp 0x1400029e9
lea rcx, [rsp + 0xa0]
call fcn.140028adc
mov qword [0x140053d88], rax
mov cl, 1
call fcn.140010850
mov rdi, rax
mov word [rsp + 0xa0], 0
lea rdx, str.PYTHONHOME
lea rbx, [rsp + 0xa0]
mov r8d, 0x28
mov rcx, rbx
call fcn.1400101c0
mov rcx, rbx
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov cl, 1
call fcn.140010850
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov rax, qword [sym.imp.python39.dll__Py_path_config]
mov dword [rax + 0x30], 1
mov r15, qword [sym.imp.python39.dll_PyImport_FrozenModules]
mov rdi, qword [r15]
test rdi, rdi
je 0x140002a87
mov rax, 0xffffffffffffffe8
nop word cs:[rax + rax]
cmp qword [rdi + rax + 0x18], 0
lea rax, [rax + 0x18]
jne 0x140002a70
shr rax, 3
imul r14d, eax, 0xaaaaaaab
lea eax, [r14 + 0x9b]
cdqe
shl rax, 3
lea rcx, [rax + rax*2]
call fcn.140029b88
mov rbx, rax
movsxd rax, r14d
shl rax, 3
lea r14, [rax + rax*2]
mov rcx, rbx
mov rdx, rdi
mov r8, r14
call fcn.140022e10
add r14, rbx
mov rcx, r14
call fcn.140001180
mov rax, qword [r15]
mov qword [0x140053d78], rax
mov qword [r15], rbx
mov rax, qword [sym.imp.python39.dll_Py_DebugFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_InspectFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_InteractiveFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_OptimizeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_DontWriteBytecodeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_NoUserSiteDirectory]
mov dword [rax], 1
mov rax, qword [sym.imp.python39.dll_Py_IgnoreEnvironmentFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_VerboseFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_BytesWarningFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_UTF8Mode]
mov dword [rax], 0
mov rax, qword [sym.imp.python39.dll_Py_FrozenFlag]
mov dword [rax], 1
mov r14, qword [sym.imp.python39.dll_Py_NoSiteFlag]
mov dword [r14], 1
mov qword [0x140053d68], r12
mov rcx, qword [r12]
call qword [sym.imp.python39.dll_Py_SetProgramName]
cmp esi, 2
mov r13d, 1
cmovge r13d, esi
mov dword [0x140053d70], esi
mov ebp, 1
lea rdi, str.__multiprocessing_fork
lea rbx, str.__multiprocessing_resource_tracker
nop word cs:[rax + rax]
cmp r13, rbp
je 0x140002bef
mov rcx, qword [r12 + rbp*8]
mov rdx, rdi
call fcn.14002bc30
lea r15d, [rbp + 1]
test eax, eax
jne 0x140002bce
cmp esi, r15d
jg 0x140002bef
mov rcx, qword [r12 + rbp*8]
mov rdx, rbx
call fcn.14002bc30
inc rbp
test eax, eax
jne 0x140002bb0
cmp esi, r15d
jle 0x140002bb0
mov rcx, qword [r12 + rbp*8]
call fcn.140028c74
lea rcx, [rsp + 0x50]
call qword [sym.imp.python39.dll__PyRuntime_Initialize]
cmp dword [rsp + 0x50], 0
jne 0x14000306c
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call qword [sym.imp.python39.dll__PyConfig_InitCompatConfig]
mov r9, qword [0x140053d68]
movsxd r8, dword [0x140053d70]
lea rcx, [rsp + 0x30]
mov rdx, rdi
call qword [sym.imp.python39.dll_PyConfig_SetArgv]
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm1
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.python39.dll_PyStatus_Exception]
test eax, eax
jne 0x14000304d
mov cl, 1
call fcn.140010850
mov rbx, rax
mov rax, qword [0x140053d68]
mov r9, qword [rax]
lea r8, [rsp + 0x1b0]
mov r12, qword [sym.imp.python39.dll_PyConfig_SetString]
lea rcx, [rsp + 0x30]
lea rdi, [rsp + 0xa0]
mov rdx, rdi
call r12
lea r8, [rsp + 0x1c0]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea r8, [rsp + 0x1d0]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea r8, [rsp + 0x1c8]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea r8, [rsp + 0x1d8]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea r8, [rsp + 0x190]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea r8, [rsp + 0x1e0]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r9, rbx
call r12
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x30]
mov r8, rbx
call qword [sym.imp.python39.dll_PyWideStringList_Append]
mov dword [rsp + 0x198], 1
mov dword [rsp + 0xb0], 1
lea rcx, [rsp + 0x30]
mov rdx, rdi
call qword [sym.imp.python39.dll_Py_InitializeFromConfig]
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x60], xmm1
movaps xmmword [rsp + 0x50], xmm0
cmp dword [rsp + 0x50], 0
jne 0x14000304d
mov dword [r14], 1
mov rdx, qword [0x140053d68]
mov ecx, esi
call qword [sym.imp.python39.dll_PySys_SetArgv]
call fcn.140010ab0
call fcn.140001000
call fcn.140001210
call fcn.140012220
call fcn.140008b20
call fcn.1400070b0
call fcn.1400038d0
call fcn.140006500
call fcn.140008280
call fcn.140012ab0
call fcn.1400123b0
call fcn.140010760
call fcn.140015ef0
call fcn.140016100
lea rcx, str.NUL:
call qword [sym.imp.python39.dll_PyUnicode_FromString]
mov rsi, rax
lea rcx, [0x140043e29]
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
mov r14, qword [sym.imp.python39.dll_PyImport_FrozenModules]
je 0x140002e04
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x140002e7f
lea rdx, [0x140043c15]
mov rcx, rsi
mov r8b, 1
xor r9d, r9d
call fcn.14000c920
mov rdi, rax
lea rcx, [0x140043e29]
mov rdx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov rdx, qword [0x140053168]
mov rcx, rdi
call fcn.140011bc0
test rax, rax
je 0x140003094
mov rdi, rax
mov rcx, rax
call qword [sym.imp.python39.dll_PyLong_AsLong]
mov ebx, eax
dec qword [rdi]
jne 0x140002e61
mov rax, qword [rdi + 8]
mov rcx, rdi
call qword [rax + 0x30]
cmp ebx, 0xffffffff
jne 0x140002e7f
mov rax, qword [sym.imp.python39.dll__PyRuntime]
mov rcx, qword [rax + 0x1f0]
cmp qword [rcx + 0x58], 0
jne 0x14000309b
lea rcx, [0x140043150]
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
je 0x140002e9a
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x140002ecf
lea rdx, [0x1400430ed]
mov rcx, rsi
xor r8d, r8d
xor r9d, r9d
call fcn.14000c920
mov rdi, rax
lea rcx, [0x140043150]
mov rdx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov ecx, 0xfffffff5
mov rdx, rdi
call fcn.140003320
lea rcx, [0x140043873]
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
je 0x140002eea
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x140002f1f
lea rdx, [0x1400430ed]
mov rcx, rsi
xor r8d, r8d
xor r9d, r9d
call fcn.14000c920
mov rdi, rax
lea rcx, [0x140043873]
mov rdx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov ecx, 0xfffffff4
mov rdx, rdi
call fcn.140003320
dec qword [rsi]
jne 0x140002f2e
mov rax, qword [rsi + 8]
mov rcx, rsi
call qword [rax + 0x30]
call fcn.140015090
call fcn.140015540
mov rax, qword [0x140053d78]
mov qword [r14], rax
call fcn.140001130
call qword [sym.imp.python39.dll__PyWarnings_Init]
call fcn.140015c60
mov rdx, qword [0x140053d80]
lea rcx, [0x1400451c2]
call fcn.140003120
mov rdx, qword [0x140053d88]
lea rcx, str.PYTHONHOME
call fcn.140003120
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
movaps xmmword [rsp + 0xe0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
lea rcx, str.NUITKA_ONEFILE_PARENT
lea rdx, [rsp + 0xa0]
mov r8d, 0x80
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
dec eax
cmp eax, 0x7d
ja 0x140003015
lea rcx, [rsp + 0xa0]
call fcn.140028d24
mov dword [0x140053d60], eax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [0x140002810]
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rax, qword [sym.imp.python39.dll__PyRuntime]
mov rax, qword [rax + 0x1f0]
mov rax, qword [rax + 0x10]
mov rcx, qword [rax + 0x358]
lea rdx, str.__main__
call qword [sym.imp.python39.dll_PyDict_DelItemString]
call fcn.140003270
call fcn.140003280
mov ecx, eax
call qword [sym.imp.python39.dll_Py_Exit]
movaps xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x40], xmm1
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.python39.dll_Py_ExitStatusException]
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0xb0], xmm1
movaps xmmword [rsp + 0xa0], xmm0
lea rcx, [rsp + 0xa0]
call qword [sym.imp.python39.dll_Py_ExitStatusException]
mov rax, qword [sym.imp.python39.dll__PyRuntime]
mov rax, qword [rax + 0x1f0]
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x140002e7f
lea rdx, [rax + 0x58]
mov rbx, qword [rax + 0x60]
mov rdi, qword [rax + 0x68]
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
dec qword [rcx]
jne 0x1400030d5
mov rax, qword [rcx + 8]
call qword [rax + 0x30]
test rbx, rbx
je 0x1400030e9
dec qword [rbx]
jne 0x1400030e9
mov rax, qword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x30]
test rdi, rdi
mov r14, qword [sym.imp.python39.dll_PyImport_FrozenModules]
je 0x140002e7f
dec qword [rdi]
jne 0x140002e7f
mov rax, qword [rdi + 8]
mov rcx, rdi
call qword [rax + 0x30]
jmp 0x140002e7f