Function at 0x813580
Capabilities:
Create thread
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov rax, qword [sym.imp.msvcrt.dll___argc]
lea rcx, [0x00822fbe]
xor ebx, ebx
mov rax, qword [rax]
mov esi, dword [rax]
mov rax, qword [sym.imp.msvcrt.dll___wargv]
mov rax, qword [rax]
mov rdi, qword [rax]
call fcn.00798160
lea rdx, [0x00822fc4]
lea rcx, [0x00822fbe]
mov qword [0x00859530], rax
call fcn.007981d0
lea rcx, str.PYTHONHOME
call fcn.00798160
mov ecx, 1
mov qword [0x00859528], rax
call fcn.007b83b0
lea rcx, str.PYTHONHOME
mov rdx, rax
call fcn.007981d0
mov ecx, 1
call fcn.007b83b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov rbp, qword [sym.imp.python37.dll_PyImport_FrozenModules]
mov r13, qword [rbp]
test r13, r13
je 0x798517
cmp qword [r13], 0
mov rax, r13
je 0x79850a
nop dword [rax]
add rax, 0x18
cmp qword [rax], 0
jne 0x798500
sub rax, r13
sar rax, 3
imul ebx, eax, 0xaaaaaaab
lea eax, [rbx + 0x9c]
movsxd rbx, ebx
lea rbx, [rbx + rbx*2]
cdqe
lea rcx, [rax + rax*2]
shl rbx, 3
lea r15, str.__multiprocessing_fork
shl rcx, 3
call sub.msvcrt.dll_malloc
mov r8, rbx
mov rdx, r13
lea r14, str.__multiprocessing_resource_tracker
mov r12, rax
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rcx, [r12 + rbx]
mov ebx, 1
call fcn.00402960
mov rax, qword [rbp]
mov qword [0x00859540], rdi
mov r13, qword [sym.imp.python37.dll_Py_NoSiteFlag]
mov qword [rbp], r12
mov r12d, 1
mov rcx, qword [rdi]
mov qword [0x00859538], rax
mov rax, qword [sym.imp.python37.dll_Py_DebugFlag]
mov dword [r13], 1
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_InspectFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_InteractiveFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_OptimizeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_DontWriteBytecodeFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_NoUserSiteDirectory]
mov dword [rax], 1
mov rax, qword [sym.imp.python37.dll_Py_IgnoreEnvironmentFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_VerboseFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_BytesWarningFlag]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_UTF8Mode]
mov dword [rax], 0
mov rax, qword [sym.imp.python37.dll_Py_FrozenFlag]
mov dword [rax], 1
call qword [sym.imp.python37.dll_Py_SetProgramName]
cmp esi, 1
jle 0x798663
nop dword [rax]
mov rcx, qword [rdi + r12*8]
mov rdx, r15
add ebx, 1
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x798647
cmp esi, ebx
jg 0x798663
mov rcx, qword [rdi + r12*8]
mov rdx, r14
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x7988a0
cmp esi, ebx
jg 0x7989ba
lea rcx, str.PYTHONIOENCODING
call sub.msvcrt.dll_getenv
lea rdx, [0x00822fb8]
test rax, rax
cmove rax, rdx
xor edx, edx
mov rcx, rax
call qword [sym.imp.python37.dll_Py_SetStandardStreamEncoding]
call qword [sym.imp.python37.dll_Py_Initialize]
mov rdx, qword [0x00859540]
mov ecx, esi
mov dword [r13], 1
call qword [sym.imp.python37.dll_PySys_SetArgv]
call fcn.007b8650
call fcn.00401570
call fcn.00405990
call fcn.007bc470
call fcn.007ae230
call fcn.007ad150
call fcn.007acb50
call fcn.007acea0
call fcn.007adf10
call fcn.007e79a0
call fcn.007bc630
call fcn.007b8350
call fcn.0080ce00
call fcn.00812eb0
lea rcx, str.NUITKA_TICKER
call sub.msvcrt.dll_getenv
test rax, rax
je 0x79870d
mov rcx, rax
call sub.msvcrt.dll_atoi
mov rdx, qword [0x00829370]
mov dword [rdx], eax
lea rcx, str.NUL:
call qword [sym.imp.python37.dll_PyUnicode_FromString]
lea rcx, [0x00823072]
mov rsi, qword [sym.imp.python37.dll_PySys_GetObject]
mov rbx, rax
call rsi
mov rdi, qword [sym.imp.python37.dll__Py_NoneStruct]
cmp rax, rdi
je 0x79896c
test rax, rax
je 0x79896c
lea rcx, [0x0082307a]
call rsi
test rax, rax
je 0x798932
cmp rax, rdi
je 0x798932
lea rcx, [0x00823083]
call rsi
cmp rax, rdi
je 0x7988f8
test rax, rax
je 0x7988f8
mov rax, qword [rbx]
sub rax, 1
mov qword [rbx], rax
je 0x7988b1
call fcn.0080c0b0
lea rdi, [rsp + 0x30]
call fcn.0080c420
mov rax, qword [0x00859538]
lea rbx, [rsp + 0x30]
mov qword [rbp], rax
call fcn.00402900
call qword [sym.imp.python37.dll__PyWarnings_Init]
call fcn.0080cb60
mov rdx, qword [0x00859530]
lea rcx, [0x00822fbe]
call fcn.00798330
mov rdx, qword [0x00859528]
lea rcx, str.PYTHONHOME
call fcn.00798330
xor eax, eax
mov ecx, 0x10
mov rdx, rbx
rep stosq qword [rdi], rax
lea rcx, str.NUITKA_ONEFILE_PARENT
mov r8d, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
sub eax, 1
cmp eax, 0x7d
jbe 0x7988c0
mov rbx, qword [sym.imp.python37.dll_PyThreadState_Get]
call rbx
lea rdx, [0x008230a0]
mov rax, qword [rax + 0x10]
mov rcx, qword [rax + 0x28]
call qword [sym.imp.python37.dll_PyDict_DelItemString]
lea rcx, [0x008230a0]
call fcn.0080bc50
call rbx
xor ecx, ecx
cmp qword [rax + 0x58], 0
mov rbp, rax
je 0x798892
mov rbx, qword [rax + 0x68]
test rbx, rbx
je 0x798885
mov r13, qword [sym.imp.python37.dll_PyUnicode_AsUTF8]
lea r12, str._frozen_importlib._bootstrap_
mov rax, qword [rbx + 0x18]
mov rdi, r12
mov rax, qword [rax + 0x20]
mov rcx, qword [rax + 0x60]
call r13
mov ecx, 0x1e
mov rsi, rax
repe cmpsb byte [rsi], byte [rdi]
seta al
sbb al, 0
test al, al
je 0x7989a9
xor ecx, ecx
call qword [sym.imp.python37.dll_PyErr_PrintEx]
mov ecx, 1
call qword [sym.imp.python37.dll_Py_Exit]
nop dword [rax + rax]
add r12, 1
cmp esi, ebx
jne 0x798630
jmp 0x798663
mov rax, qword [rbx + 8]
mov rcx, rbx
call qword [rax + 0x30]
jmp 0x79878c
mov rcx, rbx
call sub.msvcrt.dll_atol
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
lea r8, [0x007980d0]
mov dword [rsp + 0x20], 0
mov dword [0x00859524], eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x79880d
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
lea rdx, [0x00823081]
call fcn.007d5d10
lea rcx, [0x00823083]
mov rsi, rax
mov rdx, rax
call qword [sym.imp.python37.dll_PySys_SetObject]
mov rdx, rsi
mov ecx, 0xfffffff4
call fcn.007982a0
jmp 0x79877c
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
lea rdx, [0x00823081]
call fcn.007d5d10
lea rcx, [0x0082307a]
mov r12, rax
mov rdx, rax
call qword [sym.imp.python37.dll_PySys_SetObject]
mov rdx, r12
mov ecx, 0xfffffff5
call fcn.007982a0
jmp 0x798761
xor r9d, r9d
mov r8d, 1
mov rcx, rbx
lea rdx, [0x00823078]
call fcn.007d5d10
lea rcx, [0x00823072]
mov r12, rax
mov rdx, rax
call qword [sym.imp.python37.dll_PySys_SetObject]
mov rdx, r12
mov ecx, 0xfffffff6
call fcn.007982a0
jmp 0x798746
mov rbx, qword [rbx + 0x10]
mov qword [rbp + 0x68], rbx
add qword [rbx], 1
jmp 0x79885c
mov rcx, qword [rdi + r12*8 + 8]
call qword [sym.imp.msvcrt.dll__wtoi]
jmp 0x798663
mov rax, qword [0x00829450]
xor edx, edx
mov r9d, dword [rax]
mov rax, qword [0x00829440]
mov r8, qword [rax]
mov rax, qword [0x00829430]
mov rcx, qword [rax]
jmp 0x798450