Function at 0x14000b820
Capabilities:
Create thread
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x140062a18]
xor rax, rsp
mov qword [rbp + 0x320], rax
call fcn.14002e808
movsxd r12, dword [rax]
call fcn.14002e810
lea rcx, [0x140047014]
mov rsi, qword [rax]
call fcn.140026dc0
lea rdx, [0x14004701c]
mov qword [0x1400645b0], rax
lea rcx, [0x140047014]
call fcn.14002aa70
lea rcx, str.PYTHONHOME
call fcn.140026dc0
mov cl, 1
mov qword [0x1400645b8], rax
call fcn.1400269d0
mov rdx, rax
lea rcx, str.PYTHONHOME
call fcn.14002aa70
mov cl, 1
call fcn.1400269d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov rax, qword [sym.imp.python39.dll__Py_path_config]
xor r14d, r14d
mov dword [rax + 0x30], 1
mov rax, qword [sym.imp.python39.dll_PyImport_FrozenModules]
mov rdx, qword [rax]
mov rcx, rdx
test rdx, rdx
je 0x14000b91c
cmp qword [rdx], r14
je 0x14000b8f9
nop
add rcx, 0x18
cmp qword [rcx], r14
jne 0x14000b8f0
sub rcx, rdx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov rbx, rdx
sar rbx, 2
mov rax, rbx
shr rax, 0x3f
add rbx, rax
jmp 0x14000b91f
mov ebx, r14d
lea eax, [rbx + 0x9b]
movsxd rcx, eax
lea rcx, [rcx + rcx*2]
shl rcx, 3
call fcn.14002d278
movsxd rcx, ebx
mov rdi, rax
lea rdx, [rcx + rcx*2]
mov rcx, rax
lea rbx, [rdx*8]
mov rdx, qword [sym.imp.python39.dll_PyImport_FrozenModules]
mov r8, rbx
mov rdx, qword [rdx]
call fcn.14002c1a0
lea rcx, [rbx + rdi]
call fcn.1400011b0
mov rdx, qword [sym.imp.python39.dll_PyImport_FrozenModules]
mov rcx, qword [rdx]
mov qword [0x1400645a8], rcx
mov qword [rdx], rdi
mov rax, qword [sym.imp.python39.dll_Py_DebugFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_InspectFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_InteractiveFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_OptimizeFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_DontWriteBytecodeFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_NoUserSiteDirectory]
mov dword [rax], 1
mov rax, qword [sym.imp.python39.dll_Py_IgnoreEnvironmentFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_VerboseFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_BytesWarningFlag]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_UTF8Mode]
mov dword [rax], r14d
mov rax, qword [sym.imp.python39.dll_Py_UTF8Mode]
cmp dword [rax], r14d
je 0x14000ba0f
mov rax, qword [sym.imp.python39.dll_Py_FileSystemDefaultEncoding]
cmp qword [rax], r14
jne 0x14000ba0f
lea rcx, [0x14004738c]
mov qword [rax], rcx
mov rax, qword [sym.imp.python39.dll_Py_HasFileSystemDefaultEncoding]
mov dword [rax], 1
mov rax, qword [sym.imp.python39.dll_Py_FrozenFlag]
mov dword [rax], 1
mov rax, qword [sym.imp.python39.dll_Py_NoSiteFlag]
mov dword [rax], 1
mov rcx, qword [rsi]
mov qword [0x140064598], rsi
call qword [sym.imp.python39.dll_Py_SetProgramName]
mov r15d, 1
mov dword [0x1400645a0], r12d
cmp r12, r15
jle 0x14000bb6f
movzx r8d, word [0x1400470cc]
lea r14d, [r15 + 1]
movzx r9d, word [0x1400470ca]
lea r11, str.__multiprocessing_fork
movzx r10d, word [0x1400470c8]
mov edi, r15d
cmp r14d, r12d
jge 0x14000bbea
mov rdx, qword [rsi + rdi*8]
mov rcx, 0xffffffffffffffff
nop dword [rax]
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r11 + rcx*2 + 2]
jne 0x14000bab6
add rcx, 2
cmp rcx, 0x17
je 0x14000bc3f
movzx eax, word [rdx + rcx*2]
cmp ax, word [r11 + rcx*2]
je 0x14000ba90
mov rcx, 0xffffffffffffffff
nop dword [rax]
movzx eax, word [rdx + rcx*2 + 2]
lea rbx, str.__multiprocessing_resource_tracker
cmp ax, word [rbx + rcx*2 + 2]
lea rbx, str.from_joblib.externals.loky.backend.popen_loky_win32_import_main__main__
jne 0x14000bb00
add rcx, 2
cmp rcx, 0x23
je 0x14000bc4b
movzx eax, word [rdx + rcx*2]
lea rbx, str.__multiprocessing_resource_tracker
cmp ax, word [rbx + rcx*2]
lea rbx, str.from_joblib.externals.loky.backend.popen_loky_win32_import_main__main__
je 0x14000bac0
cmp word [rdx], r10w
jne 0x14000bbea
cmp word [rdx + 2], r9w
jne 0x14000bbea
cmp word [rdx + 4], r8w
jne 0x14000bbea
mov rcx, qword [rsi + rdi*8 + 8]
lea r8, [0x14005fbe4]
lea rdx, str.from_joblib.externals.loky.backend.resource_tracker_import_main__main__i__False_
call fcn.14000b7c0
test eax, eax
jne 0x14000bb6c
mov r10, qword [rsi + rdi*8 + 8]
xor eax, eax
movzx ecx, word [r10 + rax*2]
cmp cx, word [rbx + rax*2]
jne 0x14000bbaa
movzx ecx, word [r10 + rax*2 + 2]
cmp cx, word [rbx + rax*2 + 2]
jne 0x14000bbaa
add rax, 2
cmp rax, 0x48
jne 0x14000bb43
mov byte [0x1400645a5], 1
xor r14d, r14d
lea rcx, [rbp + 0x140]
call qword [sym.imp.python39.dll__PyRuntime_Initialize]
cmp dword [rax], 0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm0
je 0x14000bc8a
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x50]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm1
call qword [sym.imp.python39.dll_Py_ExitStatusException]
int3
lea r9, [0x1400645c4]
mov rcx, r10
lea r8, [0x1400645c0]
lea rdx, str.from_joblib.externals.loky.backend.popen_loky_win32_import_main__main_pipe_handle_i__parent_pid_i_
call fcn.14000b7c0
test eax, eax
jne 0x14000bb65
movzx r8d, word [0x1400470cc]
lea r11, str.__multiprocessing_fork
movzx r9d, word [0x1400470ca]
movzx r10d, word [0x1400470c8]
mov rbx, qword [rsi + rdi*8]
cmp word [rbx], r10w
jne 0x14000bc02
cmp word [rbx + 2], r9w
jne 0x14000bc02
cmp word [rbx + 4], r8w
je 0x14000bc63
movzx eax, word [rbx]
cmp ax, word [0x1400472dc]
jne 0x14000bc28
movzx eax, word [rbx + 2]
cmp ax, word [0x1400472de]
jne 0x14000bc28
movzx eax, word [rbx + 4]
cmp ax, word [0x1400472e0]
je 0x14000bc63
inc r15d
inc r14d
inc rdi
cmp rdi, r12
jge 0x14000bb6c
jmp 0x14000ba75
mov byte [0x1400645a4], 1
jmp 0x14000bb6c
movsxd rcx, r15d
mov rcx, qword [rsi + rcx*8 + 8]
call fcn.14002e4a0
mov dword [0x14005fbe0], eax
jmp 0x14000bb6c
mov ecx, 2
call fcn.14002e938
mov rcx, rax
lea rdx, str.Error__the_program_tried_to_call_itself_with__ls_argument._Disable_with___no_deployment_flagself_execution._n
mov r8, rbx
call fcn.14000b770
mov ecx, 2
call fcn.14002e7d4
int3
lea rcx, [rbp - 0x50]
call qword [sym.imp.python39.dll__PyConfig_InitCompatConfig]
movsxd r8, dword [0x1400645a0]
lea rdx, [rbp - 0x50]
mov r9, qword [0x140064598]
lea rcx, [rbp + 0x160]
call qword [sym.imp.python39.dll_PyConfig_SetArgv]
lea rcx, [rbp - 0x70]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x60], xmm1
movups xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x70], xmm0
call qword [sym.imp.python39.dll_PyStatus_Exception]
test eax, eax
je 0x14000bd01
movups xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x40], xmm1
call qword [sym.imp.python39.dll_Py_ExitStatusException]
int3
mov cl, 1
call fcn.1400269d0
mov r9, qword [0x140064598]
lea r8, [rbp + 0xc0]
lea rdx, [rbp - 0x50]
mov rbx, rax
lea rcx, [rbp + 0x180]
mov r9, qword [r9]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xd0]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xe0]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xd8]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xe8]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x200]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xa0]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x220]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r9, rbx
lea r8, [rbp + 0xf0]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x240]
call qword [sym.imp.python39.dll_PyConfig_SetString]
mov r8, rbx
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x260]
call qword [sym.imp.python39.dll_PyWideStringList_Append]
lea rdx, [rbp - 0x50]
mov dword [rbp + 0xa8], 1
lea rcx, [rbp + 0x280]
mov dword [rbp - 0x40], 1
call qword [sym.imp.python39.dll_Py_InitializeFromConfig]
cmp dword [rax], 0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm0
je 0x14000be31
movups xmm0, xmmword [rax]
lea rcx, [rsp + 0x70]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rbp - 0x80], xmm1
call qword [sym.imp.python39.dll_Py_ExitStatusException]
int3
mov rax, qword [sym.imp.python39.dll__PyRuntime]
mov ecx, r12d
mov rdi, qword [rax + 0x1f0]
mov rax, qword [sym.imp.python39.dll_Py_NoSiteFlag]
mov dword [rax], 1
mov rdx, qword [0x140064598]
call qword [sym.imp.python39.dll_PySys_SetArgv]
call fcn.140023280
mov rcx, rdi
call fcn.140001000
mov rcx, rdi
call fcn.140001ff0
call fcn.1400236a0
call fcn.140023bc0
call fcn.140023cb0
call fcn.140023c60
call fcn.140023f40
call fcn.140023c10
call fcn.140024250
call fcn.140024320
call fcn.140026100
call fcn.14002a210
call fcn.14002a1f0
lea rcx, str.NUL:
call qword [sym.imp.python39.dll_PyUnicode_FromString]
lea rcx, [0x140047364]
mov rsi, rax
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
je 0x14000bed3
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x14000bf10
mov r9b, 1
mov qword [rsp + 0x20], r14
lea r8, [0x140047384]
mov rdx, rsi
mov rcx, rdi
call fcn.140012540
mov rdx, rax
lea rcx, [0x140047364]
mov rbx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov r8, rbx
mov edx, 0xfffffff6
mov rcx, rdi
call fcn.14000b670
lea rcx, [0x14004736c]
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
je 0x14000bf2b
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x14000bf68
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [0x140047388]
mov rdx, rsi
mov rcx, rdi
call fcn.140012540
mov rdx, rax
lea rcx, [0x14004736c]
mov rbx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov r8, rbx
mov edx, 0xfffffff5
mov rcx, rdi
call fcn.14000b670
lea rcx, [0x140047374]
call qword [sym.imp.python39.dll_PySys_GetObject]
test rax, rax
je 0x14000bf83
cmp rax, qword [sym.imp.python39.dll__Py_NoneStruct]
jne 0x14000bfc0
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [0x140047388]
mov rdx, rsi
mov rcx, rdi
call fcn.140012540
mov rdx, rax
lea rcx, [0x140047374]
mov rbx, rax
call qword [sym.imp.python39.dll_PySys_SetObject]
mov r8, rbx
mov edx, 0xfffffff4
mov rcx, rdi
call fcn.14000b670
sub qword [rsi], 1
jne 0x14000bfd0
mov rax, qword [rsi + 8]
mov rcx, rsi
call qword [rax + 0x30]
call fcn.140026e60
mov rcx, rdi
call fcn.14002a6b0
mov rcx, qword [sym.imp.python39.dll_PyImport_FrozenModules]
mov rax, qword [0x1400645a8]
mov qword [rcx], rax
mov rcx, rdi
call fcn.140001260
call qword [sym.imp.python39.dll__PyWarnings_Init]
mov rcx, rdi
call fcn.14002a000
mov r8, qword [0x1400645b0]
lea rdx, [0x140047014]
mov rcx, rdi
call fcn.14002ab70
mov r8, qword [0x1400645b8]
lea rdx, str.PYTHONHOME
mov rcx, rdi
call fcn.14002ab70
xor edx, edx
lea rcx, [rbp + 0x2a0]
mov r8d, 0x80
call fcn.14002c600
mov r8d, 0x80
lea rdx, [rbp + 0x2a0]
lea rcx, str.NUITKA_ONEFILE_PARENT
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
dec eax
cmp eax, 0x7d
ja 0x14000c095
lea rcx, [rbp + 0x2a0]
call fcn.14002e4cc
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14000b5f0]
mov dword [0x1400645c8], eax
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14000b5d0
mov rcx, rax
lea rdx, str.__main__
call qword [sym.imp.python39.dll_PyDict_DelItemString]
xor r8d, r8d
lea rdx, str.__main__
mov rcx, rdi
call fcn.14000b480
mov rcx, rdi
call fcn.14000b550
mov ecx, eax
call qword [sym.imp.python39.dll_Py_Exit]
int3