Function at 0x56ee20
Capabilities:
Create thread
Query environment variable

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x15c
mov dword [esp + 4], 0x56eaf0
mov ebx, dword [esp + 0x170]
mov dword [esp], 0xb
call sub.msvcrt.dll_signal
mov dword [esp], 0x605376
call fcn.0058dfb0
mov dword [esp + 4], 0x60537c
mov dword [esp], 0x605376
mov dword [0x63f5b8], eax
call fcn.0058e0b0
mov dword [esp], str.PYTHONHOME
call fcn.0058dfb0
mov dword [esp], 1
mov dword [0x63f5b4], eax
call fcn.005906c0
mov dword [esp], str.PYTHONHOME
mov dword [esp + 4], eax
call fcn.0058e0b0
mov dword [esp], 1
call fcn.005906c0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov eax, dword [sym.imp.python39.dll__Py_path_config]
sub esp, 4
mov dword [eax + 0x18], 1
mov eax, dword [sym.imp.python39.dll_PyImport_FrozenModules]
mov esi, dword [eax]
test esi, esi
je 0x56f4bd
mov ecx, dword [esi]
mov eax, esi
test ecx, ecx
je 0x56eee2
lea esi, [esi]
mov edx, dword [eax + 0xc]
add eax, 0xc
test edx, edx
jne 0x56eed8
sub eax, esi
mov ebp, eax
sar ebp, 2
imul ebp, ebp, 0xaaaaaaab
add eax, 0x738
lea ebp, [ebp + ebp*2]
mov dword [esp], eax
shl ebp, 2
call sub.msvcrt.dll_malloc
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
mov edi, eax
mov dword [esp], eax
add ebp, edi
call sub.msvcrt.dll_memcpy
mov dword [esp], ebp
call fcn.00401780
mov eax, dword [sym.imp.python39.dll_PyImport_FrozenModules]
mov eax, dword [eax]
mov dword [0x63f5bc], eax
mov eax, dword [sym.imp.python39.dll_PyImport_FrozenModules]
mov dword [eax], edi
mov eax, dword [sym.imp.python39.dll_Py_DebugFlag]
mov edi, 1
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_InspectFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_InteractiveFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_OptimizeFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_DontWriteBytecodeFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_NoUserSiteDirectory]
mov dword [eax], 1
mov eax, dword [sym.imp.python39.dll_Py_IgnoreEnvironmentFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_VerboseFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_BytesWarningFlag]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_UTF8Mode]
mov dword [eax], 0
mov eax, dword [sym.imp.python39.dll_Py_FrozenFlag]
mov dword [eax], 1
mov eax, dword [sym.imp.python39.dll_Py_NoSiteFlag]
mov dword [eax], 1
mov eax, dword [esp + 0x174]
mov dword [0x63f5c4], eax
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.python39.dll_Py_SetProgramName]
mov eax, dword [esp + 0x174]
mov dword [0x63f5c0], ebx
lea ebp, [eax + 4]
jmp 0x56f01e
mov dword [esp + 4], 0x605602
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f7da
mov dword [esp + 4], 0x605608
mov eax, dword [ebp]
add ebp, 4
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f7da
cmp ebx, edi
jle 0x56f0f0
add edi, 1
mov eax, dword [ebp]
mov esi, ebp
cmp ebx, edi
jle 0x56efe8
mov dword [esp + 4], str.__multiprocessing_fork
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f5eb
mov dword [esp + 4], str.__multiprocessing_resource_tracker
mov eax, dword [ebp]
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f5f7
mov dword [esp + 4], 0x605602
mov eax, dword [ebp]
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f088
mov eax, dword [ebp]
jmp 0x56efe8
mov dword [esp + 8], 0x5fe980
mov dword [esp + 4], str.from_joblib.externals.loky.backend.resource_tracker_import_main__main__i__False_
mov eax, dword [ebp + 4]
mov dword [esp], eax
call fcn.0056eb40
test eax, eax
jne 0x56f0f0
mov dword [esp + 4], str.from_joblib.externals.loky.backend.popen_loky_win32_import_main__main__
mov eax, dword [ebp + 4]
mov dword [esp], eax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x56f0e5
mov dword [esp + 0xc], 0x63f5a8
mov dword [esp + 8], 0x63f5ac
mov dword [esp + 4], str.from_joblib.externals.loky.backend.popen_loky_win32_import_main__main_pipe_handle_i__parent_pid_i_
mov eax, dword [ebp + 4]
mov dword [esp], eax
call fcn.0056eb40
test eax, eax
je 0x56f07c
mov byte [0x63f5b0], 1
lea esi, [esi]
call fcn.00585c20
lea eax, [esp + 0x44]
mov dword [esp], eax
call dword [sym.imp.python39.dll__PyRuntime_Initialize]
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x56f5d8
lea eax, [esp + 0x54]
mov dword [esp], eax
call dword [sym.imp.python39.dll__PyConfig_InitCompatConfig]
mov eax, dword [0x63f5c4]
mov dword [esp + 0xc], eax
mov eax, dword [0x63f5c0]
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
lea eax, [esp + 0x44]
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyConfig_SetArgv]
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], eax
call dword [sym.imp.python39.dll_PyStatus_Exception]
mov dword [esp + 0x24], eax
test eax, eax
jne 0x56f5d8
mov dword [esp], 1
lea edi, [esp + 0x30]
call fcn.005906c0
mov ebp, dword [sym.imp.python39.dll_PyConfig_SetString]
mov esi, eax
mov eax, dword [0x63f5c4]
mov eax, dword [eax]
mov dword [esp], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0x110]
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
call ebp
lea eax, [esp + 0x118]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x120]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x11c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x124]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x100]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x128]
mov dword [esp + 0xc], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], edi
call ebp
lea eax, [esp + 0x108]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], edi
call dword [sym.imp.python39.dll_PyWideStringList_Append]
lea eax, [esp + 0x54]
mov dword [esp + 0x104], 1
mov dword [esp + 4], eax
lea eax, [esp + 0x44]
mov dword [esp], eax
mov dword [esp + 0x64], 1
call dword [sym.imp.python39.dll_Py_InitializeFromConfig]
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x56f5d8
mov eax, dword [sym.imp.python39.dll__PyRuntime]
mov esi, dword [eax + 0x118]
mov eax, dword [sym.imp.python39.dll_Py_NoSiteFlag]
mov dword [eax], 1
mov eax, dword [0x63f5c4]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.python39.dll_PySys_SetArgv]
call fcn.00590910
mov dword [esp], esi
call fcn.00401590
mov dword [esp], esi
call fcn.004096a0
call fcn.00591c30
call fcn.00583570
call fcn.00582390
call fcn.00581d90
call fcn.005820a0
call fcn.00583240
call fcn.005bf970
call fcn.00591dd0
call fcn.00590640
call fcn.005e5600
call fcn.005eabc0
mov eax, dword [sym.imp.python39.dll_PyUnicode_FromString]
mov dword [esp], str.NUL:
mov dword [esp + 0x28], eax
call eax
mov dword [esp], 0x605613
mov ebp, dword [sym.imp.python39.dll_PySys_GetObject]
mov ebx, eax
call ebp
mov edi, dword [sym.imp.python39.dll__Py_NoneStruct]
cmp eax, edi
je 0x56f4c6
test eax, eax
je 0x56f4c6
mov dword [esp], 0x60561b
call ebp
cmp eax, edi
je 0x56f556
test eax, eax
je 0x56f556
mov dword [esp], 0x605624
call ebp
test eax, eax
je 0x56f512
cmp eax, edi
je 0x56f512
sub dword [ebx], 1
je 0x56f4b1
call fcn.005e4330
mov dword [esp], esi
call fcn.005e4980
mov edx, dword [sym.imp.python39.dll_PyImport_FrozenModules]
mov eax, dword [0x63f5bc]
mov dword [edx], eax
mov dword [esp], esi
call fcn.00401710
call dword [sym.imp.python39.dll__PyWarnings_Init]
mov dword [esp], esi
call fcn.005e52d0
mov eax, dword [0x63f5b8]
mov dword [esp + 4], 0x605376
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.0058e3f0
mov eax, dword [0x63f5b4]
mov dword [esp + 4], str.PYTHONHOME
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.0058e3f0
cmp byte [0x63f5b1], 0
jne 0x56f614
cmp byte [0x63f5b0], 0
jne 0x56f631
cmp dword [0x5fe984], 0xffffffff
jne 0x56f74d
cmp dword [0x5fe980], 0xffffffff
jne 0x56f79e
xor eax, eax
lea edi, [esp + 0x54]
lea ebx, [esp + 0x54]
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], ebx
mov dword [esp], str.NUITKA_ONEFILE_PARENT
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
sub eax, 1
sub esp, 0xc
cmp eax, 0x7d
jbe 0x56f59e
mov eax, dword [sym.imp.python39.dll__PyRuntime]
mov eax, dword [eax + 0x118]
mov dword [esp + 4], 0x605755
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x1dc]
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyDict_DelItemString]
mov eax, esi
call fcn.0056ec70
xor ecx, ecx
mov edx, 0x605755
mov eax, esi
call fcn.0056eb70
cmp dword [esi + 0x34], 0
je 0x56f4a4
mov eax, esi
call fcn.0056ed90
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call dword [sym.imp.python39.dll_Py_Exit]
mov eax, ebx
call fcn.0056ec00
jmp 0x56f38a
xor eax, eax
xor ebp, ebp
jmp 0x56eeef
xor eax, eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x605619
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.005aebf0
mov dword [esp], 0x605613
mov dword [esp + 4], eax
mov dword [esp + 0x2c], eax
call dword [sym.imp.python39.dll_PySys_SetObject]
mov ecx, dword [esp + 0x2c]
mov edx, 0xfffffff6
mov eax, esi
call fcn.0056ecd0
jmp 0x56f34f
xor ecx, ecx
mov dword [esp + 8], 0x605622
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.005aebf0
mov dword [esp], 0x605624
mov edi, eax
mov dword [esp + 4], eax
call dword [sym.imp.python39.dll_PySys_SetObject]
mov ecx, edi
mov edx, 0xfffffff4
mov eax, esi
call fcn.0056ecd0
jmp 0x56f381
xor eax, eax
mov dword [esp + 8], 0x605622
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.005aebf0
mov dword [esp], 0x60561b
mov dword [esp + 4], eax
mov dword [esp + 0x2c], eax
call dword [sym.imp.python39.dll_PySys_SetObject]
mov ecx, dword [esp + 0x2c]
mov edx, 0xfffffff5
mov eax, esi
call fcn.0056ecd0
jmp 0x56f368
mov dword [esp], ebx
call sub.msvcrt.dll_atol
xor edx, edx
mov dword [esp + 8], 0x56ea50
mov dword [0x63f5a4], eax
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 4], edx
mov dword [esp], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
jmp 0x56f459
mov ecx, 4
mov edi, esp
lea esi, [esp + 0x44]
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.python39.dll_Py_ExitStatusException]
mov byte [0x63f5b1], 1
jmp 0x56f0f0
mov eax, dword [esp + 0x174]
mov eax, dword [eax + edi*4]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wtoi]
mov dword [0x5fe984], eax
jmp 0x56f0f0
xor ecx, ecx
mov edx, str.__parents_main__
mov eax, esi
call fcn.0056eb70
cmp dword [esi + 0x34], 0
jne 0x56f499
jmp 0x56f4a4
mov ecx, 1
mov edx, str.joblib.externals.loky.backend.popen_loky_win32
mov eax, esi
call fcn.0056eb70
mov dword [esp], 0x60566b
mov edi, eax
call ebp
mov ebx, eax
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyList_Size]
mov edx, dword [0x639060]
mov dword [esp], ebx
sub eax, 2
mov dword [esp + 4], 1
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
call dword [sym.imp.python39.dll_PyList_SetSlice]
mov dword [esp + 4], 0x605670
mov dword [esp], edi
call dword [sym.imp.python39.dll_PyObject_GetAttrString]
mov ebx, eax
mov eax, dword [0x63f5ac]
test eax, eax
je 0x56f7c9
mov edi, dword [sym.imp.python39.dll_PyLong_FromLong]
mov dword [esp + 0x44], str.pipe_handle
mov dword [esp + 0x48], str.parent_pid
mov dword [esp], eax
call edi
mov dword [esp + 0x54], eax
mov eax, dword [0x63f5a8]
mov dword [esp], eax
call edi
mov dword [esp + 8], 2
mov dword [esp + 0x58], eax
lea eax, [esp + 0x54]
mov dword [esp + 4], eax
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00587ff0
mov edx, dword [ebx + 4]
mov ecx, dword [0x639060]
mov edx, dword [edx + 0x40]
test edx, edx
je 0x56f826
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call edx
mov ebx, eax
test eax, eax
je 0x56f809
mov eax, esi
call fcn.0056ec70
test al, al
je 0x56f493
sub dword [ebx], 1
jne 0x56f729
mov eax, ebx
call fcn.0056ec00
mov eax, dword [sym.imp.python39.dll_PyExc_SystemError]
mov ebx, dword [eax]
mov dword [esp], 0x6056cc
mov eax, dword [esp + 0x28]
call eax
mov edx, ebx
mov ecx, eax
mov eax, esi
call fcn.0056ec10
jmp 0x56f493
mov ecx, 1
mov edx, str.multiprocessing.resource_tracker
mov eax, esi
call fcn.0056eb70
mov dword [esp + 4], 0x605670
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyObject_GetAttrString]
mov ebx, eax
mov eax, dword [0x5fe984]
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyLong_FromLong]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.005a14b0
cmp dword [esi + 0x34], 0
jne 0x56f499
jmp 0x56f4a4
mov ecx, 1
mov edx, str.joblib.externals.loky.backend.resource_tracker
mov eax, esi
call fcn.0056eb70
mov dword [esp + 4], 0x605670
mov dword [esp], eax
call dword [sym.imp.python39.dll_PyObject_GetAttrString]
mov ebx, eax
mov eax, dword [0x5fe980]
jmp 0x56f776
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.005a0080
jmp 0x56f493
mov ebx, dword [esi]
mov dword [esp], 2
call dword [0x600324]
mov dword [esp + 4], str.Error__the_program_tried_to_call_itself_with__ls_argument._Disable_with___no_deployment_flagself_execution._n
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.0056edf0
mov dword [esp], 2
call sub.msvcrt.dll_exit
cmp dword [esi + 0x34], 0
jne 0x56f493
mov eax, dword [sym.imp.python39.dll_PyExc_SystemError]
mov ebx, dword [eax]
mov dword [esp], 0x6056a8
jmp 0x56f737
mov dword [esp + 4], ebx
mov dword [esp], 0x60568c
call fcn.00588090
jmp 0x56f493