Function at 0x140077850
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x610
mov rax, qword [0x1400ee010]
xor rax, rsp
mov qword [rsp + 0x600], rax
mov byte [rsp + 0x578], 0x25
mov al, 0x64
mov cl, 0x75
movzx edx, cl
mov r8b, 0x61
movzx r9d, al
mov r10b, 0x71
movzx r11d, al
xor ebx, ebx
xor al, 0x25
mov byte [rsp + 0x579], al
xor cl, 0x25
mov byte [rsp + 0x57a], cl
xor dl, 0x25
mov byte [rsp + 0x57b], dl
xor r8b, 0x25
mov byte [rsp + 0x57c], r8b
xor r9b, 0x25
mov byte [rsp + 0x57d], r9b
xor r10b, 0x25
mov byte [rsp + 0x57e], r10b
xor r11b, 0x25
mov byte [rsp + 0x57f], r11b
mov byte [rsp + 0x580], bl
lea rcx, [rsp + 0x579]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x570], rax
movdqa xmm1, xmmword [0x1400d84d0]
movdqu xmmword [rsp + 0x20], xmm1
mov cl, 0x4c
mov dl, 0x5f
mov r8b, 0x48
mov r10b, 0x1f
mov r11b, 0x72
mov bl, 0x41
mov dil, 0x42
mov sil, 0x4a
mov r14b, 3
movzx r15d, bl
movzx r12d, dil
movzx r13d, sil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r9b
xor byte [rsp + 0x23], r9b
xor byte [rsp + 0x24], r9b
xor byte [rsp + 0x25], r9b
xor byte [rsp + 0x26], r9b
xor byte [rsp + 0x27], r9b
xor byte [rsp + 0x28], r9b
xor byte [rsp + 0x29], r9b
xor byte [rsp + 0x2a], r9b
xor byte [rsp + 0x2b], r9b
xor byte [rsp + 0x2c], r9b
xor byte [rsp + 0x2d], r9b
xor byte [rsp + 0x2e], r9b
xor byte [rsp + 0x2f], r9b
xor cl, r9b
mov byte [rsp + 0x30], cl
xor dl, r9b
mov byte [rsp + 0x31], dl
xor r8b, r9b
mov byte [rsp + 0x32], r8b
xor r10b, r9b
mov byte [rsp + 0x33], r10b
xor r11b, r9b
mov byte [rsp + 0x34], r11b
xor bl, r9b
mov byte [rsp + 0x35], bl
xor dil, r9b
mov byte [rsp + 0x36], dil
xor sil, r9b
mov byte [rsp + 0x37], sil
xor r14b, r9b
mov byte [rsp + 0x38], r14b
xor r15b, r9b
mov byte [rsp + 0x39], r15b
xor r12b, r9b
mov byte [rsp + 0x3a], r12b
xor r13b, r9b
mov byte [rsp + 0x3b], r13b
mov byte [rsp + 0x3c], 0
mov r8, qword [rsp + 0x570]
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x590]
call fcn.14004a050
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x20]
call fcn.1400771b0
nop
cmp qword [rax + 0x18], 8
jb 0x140077a36
mov rax, qword [rax]
mov rdx, rax
call fcn.140079440
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140077a84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077a7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140077a7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
xor r14d, r14d
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r14w
mov rax, qword [0x140110218]
test rax, rax
je 0x140077d9f
cmp dword [rax + 8], 4
jl 0x140077d9f
lea r15, vtable.plog::Record.0
mov qword [rsp + 0x290], r15
mov dword [rsp + 0x2a8], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x2ac], eax
mov qword [rsp + 0x2b0], r14
mov qword [rsp + 0x2b8], 0x1b
lea rcx, [rsp + 0x2c0]
call fcn.140078d90
lea r12, str.WinMain
mov qword [rsp + 0x3a8], r12
lea r13, [0x1400ac816]
mov qword [rsp + 0x3b0], r13
mov dword [rsp + 0x3b8], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c0], xmm0
mov qword [rsp + 0x3d0], r14
mov qword [rsp + 0x3d8], 0xf
mov byte [rsp + 0x3c0], r14b
movups xmmword [rsp + 0x3e0], xmm0
mov qword [rsp + 0x3f0], r14
mov qword [rsp + 0x3f8], 7
mov word [rsp + 0x3e0], r14w
lea rcx, [rsp + 0x298]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d8300]
movdqu xmmword [rsp + 0x68], xmm1
movdqa xmm2, xmmword [0x1400d8540]
movdqu xmmword [rsp + 0x78], xmm2
mov dl, 0x3e
mov r8b, 0x22
mov r9b, 0x2f
mov r10b, 0x6a
mov r11b, 0x38
mov bl, 0x23
mov dil, 0x2e
movzx esi, r9b
mov r14b, 0x64
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x69], al
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor byte [rsp + 0x70], cl
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x78], al
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor byte [rsp + 0x80], cl
xor byte [rsp + 0x81], cl
xor byte [rsp + 0x82], cl
xor byte [rsp + 0x83], cl
xor byte [rsp + 0x84], cl
xor byte [rsp + 0x85], cl
xor byte [rsp + 0x86], cl
xor byte [rsp + 0x87], cl
xor dl, cl
mov byte [rsp + 0x88], dl
xor r8b, cl
mov byte [rsp + 0x89], r8b
xor r9b, cl
mov byte [rsp + 0x8a], r9b
xor r10b, cl
mov byte [rsp + 0x8b], r10b
xor r11b, cl
mov byte [rsp + 0x8c], r11b
xor bl, cl
mov byte [rsp + 0x8d], bl
xor dil, cl
mov byte [rsp + 0x8e], dil
xor sil, cl
mov byte [rsp + 0x8f], sil
xor r14b, cl
mov byte [rsp + 0x90], r14b
mov byte [rsp + 0x91], 0
lea rdx, [rsp + 0x69]
lea rcx, [rsp + 0xb8]
call fcn.1400771b0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140077ce9
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.140079c50
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, 8
jb 0x140077d45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077d40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140077d40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
xor r14d, r14d
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], 7
mov word [rsp + 0xb8], r14w
lea rsi, [rsp + 0x290]
mov rdi, qword [0x140110218]
mov rbx, qword [rdi + 0x10]
cmp rbx, qword [rdi + 0x18]
je 0x140077d90
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rsi
call qword [rax + 8]
add rbx, 8
jmp 0x140077d78
lea rcx, [rsp + 0x290]
call fcn.140077570
jmp 0x140077dad
lea r15, vtable.plog::Record.0
lea r12, str.WinMain
lea rdi, [0x1400ac816]
mov ecx, 0x38
call fcn.1400a49d0
mov rbx, rax
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
mov qword [rbx], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov qword [rbx + 0x20], r14
mov qword [rbx + 0x28], r14
mov qword [rbx + 0x30], rax
mov qword [rsp + 0x588], rbx
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xf0], r14
lea r8d, [rax + 6]
lea rdx, str.Roblox
lea rcx, [rsp + 0xd8]
call fcn.140011070
lea rdx, [rsp + 0xd8]
mov rcx, rbx
call fcn.14008d1d0
mov ecx, 0x20
call fcn.1400a49d0
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [rbx + 8]
mov rcx, rax
call fcn.14008deb0
mov r13, rax
mov ecx, 0x28
call fcn.1400a49d0
mov qword [rsp + 0x570], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov r8, r13
mov rdx, rbx
mov rcx, rax
call fcn.1400840e0
mov rsi, rax
mov qword [rsp + 0x578], rax
mov rax, qword [0x140110218]
test rax, rax
je 0x1400780c5
cmp dword [rax + 8], 4
jl 0x1400780c5
mov qword [rsp + 0x400], r15
mov dword [rsp + 0x418], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x41c], eax
mov qword [rsp + 0x420], r14
mov qword [rsp + 0x428], 0x2b
lea rcx, [rsp + 0x430]
call fcn.140078d90
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x520], rdi
mov dword [rsp + 0x528], r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x530], xmm0
mov qword [rsp + 0x540], r14
mov qword [rsp + 0x548], 0xf
mov byte [rsp + 0x530], 0
movups xmmword [rsp + 0x550], xmm0
mov qword [rsp + 0x560], r14
mov qword [rsp + 0x568], 7
mov word [rsp + 0x550], r14w
lea rcx, [rsp + 0x408]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d84a0]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x55
mov r8b, 0x4a
mov r9b, 0x14
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
mov byte [rsp + 0x33], 0
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0xf8]
call fcn.1400771b0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140078011
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x430]
call fcn.140079c50
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x14007806d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078068
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078068
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
mov qword [rsp + 0x108], r14
mov qword [rsp + 0x110], 7
mov word [rsp + 0xf8], r14w
lea r15, [rsp + 0x400]
mov r14, qword [0x140110218]
mov rdi, qword [r14 + 0x10]
nop dword [rax]
cmp rdi, qword [r14 + 0x18]
je 0x1400780b8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, r15
call qword [rax + 8]
add rdi, 8
jmp 0x1400780a0
lea rcx, [rsp + 0x400]
call fcn.140077570
lea rdx, [rsp + 0x570]
mov rcx, rbx
call fcn.14008d7f0
mov r15d, dword [rsp + 0x574]
mov r12d, dword [rsp + 0x570]
cmp byte [rsi + 1], 0
je 0x140078134
mov rdx, rbx
mov rcx, rsi
call fcn.140085a70
lea rdx, [rsp + 0x570]
mov rcx, rbx
call fcn.14008d7f0
mov r14d, dword [rsp + 0x574]
mov rdi, qword [rsp + 0x570]
cmp r14d, r15d
jne 0x140078120
cmp edi, r12d
je 0x1400780e5
mov rcx, rbx
call fcn.14008d930
test al, al
je 0x140078134
mov r15d, r14d
mov r12d, edi
jmp 0x1400780e5
test r13, r13
je 0x140078150
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x20
mov rcx, r13
call fcn.1400a4a0c
mov rax, qword [0x140110218]
test rax, rax
je 0x1400783f7
cmp dword [rax + 8], 4
jl 0x1400783f7
lea rax, vtable.plog::Record.0
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x138], 4
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x13c], eax
xor r15d, r15d
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x148], 0x3f
lea rcx, [rsp + 0x150]
call fcn.140078d90
lea rax, str.WinMain
mov qword [rsp + 0x238], rax
lea rax, [0x1400ac816]
mov qword [rsp + 0x240], rax
mov dword [rsp + 0x248], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], r15
mov qword [rsp + 0x268], 0xf
mov byte [rsp + 0x250], r15b
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], r15
mov qword [rsp + 0x288], 7
mov word [rsp + 0x270], r15w
lea rcx, [rsp + 0x128]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__ftime64]
nop
movdqa xmm1, xmmword [0x1400d8590]
movdqu xmmword [rsp + 0x40], xmm1
movdqa xmm2, xmmword [0x1400d8560]
movdqu xmmword [rsp + 0x50], xmm2
mov dl, 0x6e
mov r8b, 0x73
mov r9b, 0x74
mov r10b, 0x7d
mov r11b, 0x34
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x41], al
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x50], al
xor byte [rsp + 0x51], cl
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
xor dl, cl
mov byte [rsp + 0x60], dl
xor r8b, cl
mov byte [rsp + 0x61], r8b
xor r9b, cl
mov byte [rsp + 0x62], r9b
xor r10b, cl
mov byte [rsp + 0x63], r10b
xor r11b, cl
mov byte [rsp + 0x64], r11b
mov byte [rsp + 0x65], r15b
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x98]
call fcn.1400771b0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140078341
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.140079c50
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 8
jb 0x14007839d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078398
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078398
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0xb0], 7
mov word [rsp + 0x98], r15w
lea r12, [rsp + 0x120]
mov r14, qword [0x140110218]
mov rdi, qword [r14 + 0x10]
nop dword [rax]
cmp rdi, qword [r14 + 0x18]
je 0x1400783e8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + 8]
add rdi, 8
jmp 0x1400783d0
lea rcx, [rsp + 0x120]
call fcn.140077570
jmp 0x1400783fa
xor r15d, r15d
test rsi, rsi
je 0x14007845b
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14007844d
mov rax, qword [rsi + 0x20]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
cmp rdx, 0x1000
jb 0x14007843c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400784a2
mov rcx, r8
call fcn.1400a4a0c
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], r15
mov edx, 0x28
mov rcx, rsi
call fcn.1400a4a0c
nop
test rbx, rbx
je 0x14007846e
mov edx, 0x38
mov rcx, rbx
call fcn.1400a4a0c
nop
xor eax, eax
mov rcx, qword [rsp + 0x600]
xor rcx, rsp
call fcn.1400a49b0
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
int3