Function at 0x140077d00
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x610
mov rax, qword [0x1400ef010]
xor rax, rsp
mov qword [rsp + 0x600], rax
mov byte [rsp + 0x578], 0x70
mov al, 0x31
mov cl, 0x20
movzx edx, cl
mov r8b, 0x34
movzx r9d, al
mov r10b, 0x24
movzx r11d, al
xor ebx, ebx
xor al, 0x70
mov byte [rsp + 0x579], al
xor cl, 0x70
mov byte [rsp + 0x57a], cl
xor dl, 0x70
mov byte [rsp + 0x57b], dl
xor r8b, 0x70
mov byte [rsp + 0x57c], r8b
xor r9b, 0x70
mov byte [rsp + 0x57d], r9b
xor r10b, 0x70
mov byte [rsp + 0x57e], r10b
xor r11b, 0x70
mov byte [rsp + 0x57f], r11b
mov byte [rsp + 0x580], bl
lea rcx, [rsp + 0x579]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x570], rax
movdqa xmm1, xmmword [0x1400d9530]
movdqu xmmword [rsp + 0x20], xmm1
mov cl, 0x3a
mov dl, 0x29
mov r8b, 0x3e
mov r10b, 0x69
mov r11b, 4
mov bl, 0x37
mov dil, 0x34
mov sil, 0x3c
mov r14b, 0x75
movzx r15d, bl
movzx r12d, dil
movzx r13d, sil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r9b
xor byte [rsp + 0x23], r9b
xor byte [rsp + 0x24], r9b
xor byte [rsp + 0x25], r9b
xor byte [rsp + 0x26], r9b
xor byte [rsp + 0x27], r9b
xor byte [rsp + 0x28], r9b
xor byte [rsp + 0x29], r9b
xor byte [rsp + 0x2a], r9b
xor byte [rsp + 0x2b], r9b
xor byte [rsp + 0x2c], r9b
xor byte [rsp + 0x2d], r9b
xor byte [rsp + 0x2e], r9b
xor byte [rsp + 0x2f], r9b
xor cl, r9b
mov byte [rsp + 0x30], cl
xor dl, r9b
mov byte [rsp + 0x31], dl
xor r8b, r9b
mov byte [rsp + 0x32], r8b
xor r10b, r9b
mov byte [rsp + 0x33], r10b
xor r11b, r9b
mov byte [rsp + 0x34], r11b
xor bl, r9b
mov byte [rsp + 0x35], bl
xor dil, r9b
mov byte [rsp + 0x36], dil
xor sil, r9b
mov byte [rsp + 0x37], sil
xor r14b, r9b
mov byte [rsp + 0x38], r14b
xor r15b, r9b
mov byte [rsp + 0x39], r15b
xor r12b, r9b
mov byte [rsp + 0x3a], r12b
xor r13b, r9b
mov byte [rsp + 0x3b], r13b
mov byte [rsp + 0x3c], 0
mov r8, qword [rsp + 0x570]
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x590]
call fcn.14004a3b0
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x20]
call fcn.140077660
nop
cmp qword [rax + 0x18], 8
jb 0x140077ee6
mov rax, qword [rax]
mov rdx, rax
call fcn.140079920
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140077f34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077f2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140077f2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a53fc
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r14w
mov rax, qword [0x140111580]
test rax, rax
je 0x14007824f
cmp dword [rax + 8], 4
jl 0x14007824f
lea r15, vtable.plog::Record.0
mov qword [rsp + 0x290], r15
mov dword [rsp + 0x2a8], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x2ac], eax
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], 0x1b
lea rcx, [rsp + 0x2c0]
call fcn.140079270
lea r12, str.WinMain
mov qword [rsp + 0x3a8], r12
lea r13, [0x1400ad836]
mov qword [rsp + 0x3b0], r13
mov dword [rsp + 0x3b8], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c0], xmm0
mov qword [rsp + 0x3d0], r14
mov qword [rsp + 0x3d8], 0xf
mov byte [rsp + 0x3c0], r14b
movups xmmword [rsp + 0x3e0], xmm0
mov qword [rsp + 0x3f0], r14
mov qword [rsp + 0x3f8], 7
mov word [rsp + 0x3e0], r14w
lea rcx, [rsp + 0x298]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d9780]
movdqu xmmword [rsp + 0x68], xmm1
movdqa xmm2, xmmword [0x1400d9550]
movdqu xmmword [rsp + 0x78], xmm2
mov dl, 0x79
mov r8b, 0x65
mov r9b, 0x68
mov r10b, 0x2d
mov r11b, 0x7f
mov bl, 0x64
mov dil, 0x69
movzx esi, r9b
mov r14b, 0x23
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x69], al
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor byte [rsp + 0x70], cl
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x78], al
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor byte [rsp + 0x80], cl
xor byte [rsp + 0x81], cl
xor byte [rsp + 0x82], cl
xor byte [rsp + 0x83], cl
xor byte [rsp + 0x84], cl
xor byte [rsp + 0x85], cl
xor byte [rsp + 0x86], cl
xor byte [rsp + 0x87], cl
xor dl, cl
mov byte [rsp + 0x88], dl
xor r8b, cl
mov byte [rsp + 0x89], r8b
xor r9b, cl
mov byte [rsp + 0x8a], r9b
xor r10b, cl
mov byte [rsp + 0x8b], r10b
xor r11b, cl
mov byte [rsp + 0x8c], r11b
xor bl, cl
mov byte [rsp + 0x8d], bl
xor dil, cl
mov byte [rsp + 0x8e], dil
xor sil, cl
mov byte [rsp + 0x8f], sil
xor r14b, cl
mov byte [rsp + 0x90], r14b
mov byte [rsp + 0x91], 0
lea rdx, [rsp + 0x69]
lea rcx, [rsp + 0xb8]
call fcn.140077660
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140078199
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.14007a130
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, 8
jb 0x1400781f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400781f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400781f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a53fc
xor r14d, r14d
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], 7
mov word [rsp + 0xb8], r14w
lea rsi, [rsp + 0x290]
mov rdi, qword [0x140111580]
mov rbx, qword [rdi + 0x10]
cmp rbx, qword [rdi + 0x18]
je 0x140078240
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
add rbx, 8
jmp 0x140078228
lea rcx, [rsp + 0x290]
call fcn.140077a20
jmp 0x14007825d
lea r15, vtable.plog::Record.0
lea r12, str.WinMain
lea rdi, [0x1400ad836]
mov ecx, 0x38
call fcn.1400a53c0
mov rbx, rax
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
mov qword [rbx], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov qword [rbx + 0x20], r14
mov qword [rbx + 0x28], r14
mov qword [rbx + 0x30], rax
mov qword [rsp + 0x588], rbx
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r14
lea r8d, [rax + 6]
lea rdx, [0x1400b2aac]
lea rcx, [rsp + 0xd8]
call fcn.140011070
lea rdx, [rsp + 0xd8]
mov rcx, rbx
call fcn.14008dbc0
mov ecx, 0x20
call fcn.1400a53c0
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.14008e8a0
mov r13, rax
mov ecx, 0x28
call fcn.1400a53c0
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov r8, r13
mov rdx, rbx
mov rcx, rax
call fcn.140084920
mov rsi, rax
mov qword [rsp + 0x578], rax
mov rax, qword [0x140111580]
test rax, rax
je 0x140078575
cmp dword [rax + 8], 4
jl 0x140078575
mov qword [rsp + 0x400], r15
mov dword [rsp + 0x418], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x41c], eax
mov qword [rsp + 0x420], r14
mov qword [rsp + 0x428], 0x32
lea rcx, [rsp + 0x430]
call fcn.140079270
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x520], rdi
mov dword [rsp + 0x528], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x530], xmm0
mov qword [rsp + 0x540], r14
mov qword [rsp + 0x548], 0xf
mov byte [rsp + 0x530], 0
movups xmmword [rsp + 0x550], xmm0
mov qword [rsp + 0x560], r14
mov qword [rsp + 0x568], 7
mov word [rsp + 0x550], r14w
lea rcx, [rsp + 0x408]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d9500]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x28
mov r8b, 0x37
mov r9b, 0x69
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
mov byte [rsp + 0x33], 0
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0xf8]
call fcn.140077660
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x1400784c1
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x430]
call fcn.14007a130
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x14007851d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078518
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078518
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a53fc
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], 7
mov word [rsp + 0xf8], r14w
lea r15, [rsp + 0x400]
mov r14, qword [0x140111580]
mov rdi, qword [r14 + 0x10]
nop dword [rax]
cmp rdi, qword [r14 + 0x18]
je 0x140078568
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
add rdi, 8
jmp 0x140078550
lea rcx, [rsp + 0x400]
call fcn.140077a20
lea rdx, [rsp + 0x570]
mov rcx, rbx
call fcn.14008e1e0
mov edx, 0xffffffec
mov r8d, 0xa8
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov edx, 0xffffffec
mov r8d, 0x800a8
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rcx, rbx
call fcn.14008e320
mov r15d, dword [rsp + 0x574]
mov r12d, dword [rsp + 0x570]
cmp byte [rsi + 1], 0
je 0x140078614
mov rdx, rbx
mov rcx, rsi
call fcn.140086350
lea rdx, [rsp + 0x570]
mov rcx, rbx
call fcn.14008e1e0
mov r14d, dword [rsp + 0x574]
mov rdi, qword [rsp + 0x570]
cmp r14d, r15d
jne 0x140078600
cmp edi, r12d
je 0x1400785c5
mov rcx, rbx
call fcn.14008e320
test al, al
je 0x140078614
mov r15d, r14d
mov r12d, edi
jmp 0x1400785c5
test r13, r13
je 0x140078630
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x20
mov rcx, r13
call fcn.1400a53fc
mov rax, qword [0x140111580]
test rax, rax
je 0x1400788d7
cmp dword [rax + 8], 4
jl 0x1400788d7
lea rax, vtable.plog::Record.0
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x138], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x13c], eax
xor r15d, r15d
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x148], 0x50
lea rcx, [rsp + 0x150]
call fcn.140079270
lea rax, str.WinMain
mov qword [rsp + 0x238], rax
lea rax, [0x1400ad836]
mov qword [rsp + 0x240], rax
mov dword [rsp + 0x248], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x268], 0xf
mov byte [rsp + 0x250], r15b
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], r15
mov qword [rsp + 0x288], 7
mov word [rsp + 0x270], r15w
lea rcx, [rsp + 0x128]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d95a0]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x1400d9560]
movdqu xmmword [rsp + 0x50], xmm2
mov dl, 0x2d
mov r8b, 0x30
mov r9b, 0x37
mov r10b, 0x3e
mov r11b, 0x77
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
xor dl, cl
mov byte [rsp + 0x60], dl
xor r8b, cl
mov byte [rsp + 0x61], r8b
xor r9b, cl
mov byte [rsp + 0x62], r9b
xor r10b, cl
mov byte [rsp + 0x63], r10b
xor r11b, cl
mov byte [rsp + 0x64], r11b
mov byte [rsp + 0x65], r15b
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x98]
call fcn.140077660
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140078821
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.14007a130
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14007887d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078878
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078878
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a53fc
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0xb0], 7
mov word [rsp + 0x98], r15w
lea r12, [rsp + 0x120]
mov r14, qword [0x140111580]
mov rdi, qword [r14 + 0x10]
nop dword [rax]
cmp rdi, qword [r14 + 0x18]
je 0x1400788c8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
add rdi, 8
jmp 0x1400788b0
lea rcx, [rsp + 0x120]
call fcn.140077a20
jmp 0x1400788da
xor r15d, r15d
test rsi, rsi
je 0x14007893b
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14007892d
mov rax, qword [rsi + 0x20]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
cmp rdx, 0x1000
jb 0x14007891c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140078982
mov rcx, r8
call fcn.1400a53fc
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
mov edx, 0x28
mov rcx, rsi
call fcn.1400a53fc
nop
test rbx, rbx
je 0x14007894e
mov edx, 0x38
mov rcx, rbx
call fcn.1400a53fc
nop
xor eax, eax
mov rcx, qword [rsp + 0x600]
xor rcx, rsp
call fcn.1400a53a0
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
int3