Function at 0x1800387e0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0x90
mov ebx, dword [rbp + 0x57]
mov eax, edx
mov r12, r8
mov rdx, rcx
lea r8d, [rax + 0xb]
mov dword [rbp - 0x41], r8d
cmp eax, r8d
jae case.0x180038884.80
mov r13, qword [rbp + 0x77]
lea r15, [0x1800797a3]
mov r14d, dword [rbp + 0x57]
mov edi, 1
mov r10, qword [0x18008de38]
mov r8d, dword [0x18008de00]
mov r11d, dword [0x18008de0c]
mov r9d, dword [0x18008de40]
mov rsi, qword [rbp + 0x7f]
mov ecx, dword [rbp - 0x41]
nop dword [rax]
add eax, 0xffffffb6
cmp eax, 0xe
ja case.default.0x180038884
lea rcx, [0x180000000]
mov ecx, dword [rcx + rax*4 + 0x39164]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
cmp qword [rbp + 0x6f], 0
je case.0x180038884.81
cmp r14d, 0x57
jne case.0x180038884.81
mov rax, qword [rbp - 0x21]
cmp byte [rax + 1], 0x3b
jne case.0x180038884.81
mov r15d, 0x77
lea rsi, [0x1800797a3]
mov eax, r15d
sub eax, 0x77
je 0x1800388e3
sub eax, 0x67
je 0x1800388d4
cmp eax, 0x67
jne 0x1800389ce
mov eax, r14d
jmp 0x180038e6b
mov r10, rsi
mov qword [0x18008de38], rsi
jmp 0x1800389ce
cmp byte [r10], 0
jne 0x180038978
mov rax, qword [rbp + 0x7f]
inc r8d
mov dword [0x18008de00], r8d
cmp r8d, dword [rax]
jl 0x18003896a
mov esi, 0xc
mov eax, esi
sub eax, 0xb
je case.0x180038884.80
cmp eax, edi
jne 0x18003895a
cmp dword [0x18008de04], 0
lea rax, [0x1800797a3]
mov qword [0x18008de38], rax
je 0x180038943
cmp byte [rdx], 0x3a
je 0x180038943
mov edx, r14d
lea rcx, str.return_M.substring_1_M.length_1__
call fcn.180076140
mov rdx, qword [rbp + 0x4f]
mov dword [0x18008de08], r14d
mov ebx, 0x3f
cmp byte [rdx], 0x3a
mov eax, 0x3a
cmove ebx, eax
dec esi
cmp esi, 0xa
ja 0x180038905
lea rsi, [0x1800797a3]
jmp 0x180038978
movsxd rax, r8d
mov rcx, qword [r12 + rax*8]
mov qword [0x18008de38], rcx
mov r8, qword [rbp + 0x67]
lea r9, [rbp - 0x39]
mov dword [0x18008de44], 2
mov ecx, 0x9b
mov eax, dword [r13]
mov dword [rbp - 0x39], eax
mov rax, qword [rbp + 0x6f]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
lea rdx, [rbp - 0x31]
mov dword [rbp - 0x31], 0
mov qword [rsp + 0x20], r12
call fcn.180010900
mov r10, qword [0x18008de38]
mov r14d, eax
mov r8d, dword [0x18008de00]
mov rdx, qword [rbp + 0x4f]
add r15d, 0x67
cmp r15d, 0x1ac
jb 0x1800388b6
mov r11d, dword [0x18008de0c]
mov r9d, dword [0x18008de40]
mov rsi, qword [rbp + 0x7f]
jmp 0x1800390fd
mov eax, dword [r12]
sub eax, dword [rdx]
mov edx, dword [rsi]
add edx, eax
mov dword [rbp - 0x11], edx
cdq
mov r15d, eax
xor r15d, edx
sub r15d, edx
mov dword [rbp - 0x19], r15d
jmp 0x1800390fd
cmp dword [0x1800e2240], 0
mov ecx, dword [rbp - 0x41]
mov qword [0x1800e2238], 0
je case.default.0x180038884
mov r9d, 0xffffffff
mov dword [0x18008de40], r9d
mov r11d, r9d
mov dword [0x18008de0c], r9d
jmp case.default.0x180038884
mov dword [rbp + 0x57], 0x4d
cmp dword [0x1800e2240], 0
jne 0x180038a67
cmp byte [r10], 0
jne 0x180038d4f
mov r14d, 0xfb
nop dword [rax]
cmp r14d, 0xfd
jae 0x180038d4f
mov eax, r14d
sub eax, 0xfb
je 0x180038c06
cmp eax, edi
jne 0x180038cd3
movsxd rdx, r8d
mov r10, qword [r12 + rdx*8]
mov qword [0x18008de38], r10
cmp byte [r10], 0x2d
jne 0x180038aae
cmp byte [r10 + 1], 0
jne 0x180038b07
mov ecx, 0x17
mov eax, ecx
sub eax, 0x17
je 0x180038ae1
cmp eax, edi
jne 0x180038b00
cmp r11d, 0xffffffff
jne 0x180038cdb
mov r11d, r8d
mov dword [0x18008de0c], r8d
inc r8d
mov dword [0x18008de00], r8d
jmp 0x180038a54
mov qword [0x18008de38], r15
mov r10, r15
mov eax, dword [r13]
test al, 2
jne 0x180039120
test dil, al
je 0x180038e92
inc ecx
cmp ecx, 0x19
jb 0x180038ab3
cmp r11d, 0xffffffff
je 0x180038b1c
cmp r9d, 0xffffffff
cmove r9d, r8d
mov dword [0x18008de40], r9d
cmp byte [r10 + 1], 0
lea rax, [r10 + 1]
je 0x180038cd3
mov qword [0x18008de38], rax
mov r10, rax
cmp byte [rax], 0x2d
jne 0x180038cd3
cmp byte [rax + 1], 0
jne 0x180038cd3
mov esi, 0xe
nop dword [rax]
mov eax, esi
sub eax, 0xc
je case.0x180038884.80
sub eax, edi
je 0x180038bd9
cmp eax, edi
jne 0x180038bf3
inc r8d
mov qword [0x18008de38], r15
mov dword [0x18008de00], r8d
mov r10, r15
cmp r9d, 0xffffffff
je 0x180038bf3
mov dword [rbp - 0x31], r8d
lea rax, [rbp - 0x31]
mov dword [rbp - 9], r9d
lea rcx, [rbp - 9]
lea r9, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r8, r12
mov dword [rbp - 0x39], r11d
mov edx, 0x82
call fcn.180034fa0
mov r8d, dword [0x18008de00]
mov r11d, dword [0x18008de0c]
mov eax, r11d
mov r9d, dword [0x18008de40]
sub eax, r9d
mov r10, qword [0x18008de38]
add r8d, eax
mov dword [0x18008de00], r8d
jmp 0x180038bf3
mov r9d, 0xffffffff
mov dword [0x18008de40], r9d
mov r11d, r9d
mov dword [0x18008de0c], r9d
mov ebx, r9d
dec esi
cmp esi, 0xb
ja 0x180038b50
inc r14d
jmp 0x180038a70
mov rax, qword [rbp + 0x7f]
mov dword [0x1800e2240], 0
cmp r8d, dword [rax]
jl 0x180038cd3
mov esi, 0xe3
mov eax, esi
sub eax, 0xe1
je case.0x180038884.80
sub eax, edi
je 0x180038cc0
cmp eax, edi
jne 0x180038cc5
mov qword [0x18008de38], r15
mov r10, r15
cmp r9d, 0xffffffff
je 0x180038c98
mov dword [rbp - 0x31], r8d
lea rax, [rbp - 0x31]
mov dword [rbp - 1], r9d
lea rcx, [rbp - 1]
lea r9, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r8, r12
mov dword [rbp - 0x39], r11d
mov edx, 0x82
call fcn.180034fa0
mov eax, dword [0x18008de0c]
sub eax, dword [0x18008de40]
mov r8d, dword [0x18008de00]
mov r10, qword [0x18008de38]
add r8d, eax
jmp 0x180038ca0
cmp r11d, 0xffffffff
cmovne r8d, r11d
mov r9d, 0xffffffff
mov dword [0x18008de00], r8d
mov dword [0x18008de40], r9d
mov r11d, r9d
mov dword [0x18008de0c], r9d
jmp 0x180038cc5
mov ebx, 0xffffffff
dec esi
cmp esi, 0xe0
ja 0x180038c22
inc r14d
jmp 0x180038a70
cmp r9d, 0xffffffff
je 0x180038d40
mov dword [rbp - 0x31], r8d
lea rax, [rbp - 0x31]
mov dword [rbp + 7], r9d
lea rcx, [rbp + 7]
lea r9, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r8, r12
mov dword [rbp - 0x39], r11d
mov edx, 0x82
call fcn.180034fa0
mov r11d, dword [0x18008de0c]
mov r9d, 0xffffffff
mov r8d, dword [0x18008de00]
mov eax, r8d
sub eax, dword [0x18008de40]
mov r10, qword [0x18008de38]
add r11d, eax
mov dword [0x18008de0c], r11d
mov dword [0x18008de40], r9d
inc r8d
mov dword [0x18008de00], r8d
jmp 0x180038a54
mov r14, qword [rbp + 0x6f]
test r14, r14
je 0x180038e06
movsxd rax, r8d
cmp r10, qword [r12 + rax*8]
je 0x180038e06
cmp byte [r10], 0x2d
je 0x180038d80
test byte [r13], 4
je 0x180038e06
nop word [rax + rax]
xor esi, esi
mov dword [0x18008de44], esi
movsx eax, byte [r10]
cmp al, 0x2d
jne 0x180038dec
inc r10
mov dword [0x18008de44], edi
mov qword [0x18008de38], r10
mov r15, qword [rbp + 0x4f]
mov eax, dword [r13]
lea r9, [rbp - 0x31]
mov r8, qword [rbp + 0x67]
lea rdx, [rbp - 0x39]
mov qword [rsp + 0x30], r14
mov ecx, 0x9b
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
mov dword [rbp - 0x31], eax
mov dword [rbp - 0x39], esi
call fcn.180010900
cmp eax, 0xffffffff
jne 0x18003913c
mov r10, qword [0x18008de38]
mov r8d, dword [0x18008de00]
jmp 0x180038e0a
cmp al, 0x3a
je 0x180038da0
mov r15, qword [rbp + 0x4f]
mov edx, eax
mov rcx, r15
call sub.VCRUNTIME140.dll_strchr
test rax, rax
cmovne esi, edi
jmp 0x180038da4
mov r15, qword [rbp + 0x4f]
movsx r14d, byte [r10]
inc r10
mov qword [0x18008de38], r10
cmp r14d, 0x3a
je 0x180038e51
cmp r14d, 0x2d
jne 0x180038e2a
cmp byte [r10], 0
jne 0x180038e51
mov edx, r14d
mov rcx, r15
call sub.VCRUNTIME140.dll_strchr
mov qword [rbp - 0x21], rax
cmp rax, 0
jne 0x1800390ba
mov r10, qword [0x18008de38]
mov r8d, dword [0x18008de00]
mov esi, 0x9e
mov ecx, esi
sub ecx, 0x9e
je 0x180038e86
cmp ecx, 0x1a
jne 0x180038ef0
mov eax, ebx
mov rbx, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r14d, 0x2d
jne 0x180038e99
cmp byte [r10], 0
jne 0x180038ea9
mov eax, 0xffffffff
jmp 0x180038e6b
cmp byte [r10], 0
jne 0x180038ea9
inc r8d
mov dword [0x18008de00], r8d
cmp dword [0x18008de04], 0
je 0x180038ee4
cmp byte [r15], 0x3a
je 0x180038ee4
cmp dword [rbp - 0x15], 0
lea rax, str.LogPreviewNavigation
lea rcx, str.m_colorerInitialized
mov edx, r14d
cmovne rcx, rax
call fcn.180076140
mov r10, qword [0x18008de38]
mov r8d, dword [0x18008de00]
mov dword [0x18008de08], r14d
mov ebx, 0x3f
add esi, 0x1a
cmp esi, 0xd2
jb 0x180038e56
jmp 0x1800389df
mov ecx, dword [rbp - 0x41]
test r8d, r8d
jne case.default.0x180038884
mov dword [0x1800e2240], edi
mov r8d, edi
mov dword [0x18008de00], edi
jmp case.default.0x180038884
mov rax, qword [rbp - 0x21]
inc rax
mov qword [rbp - 0x21], rax
cmp byte [rax], 0x3a
je 0x180038f50
cmp byte [r10], 0
jne 0x180039035
inc r8d
mov ebx, r14d
mov dword [0x18008de00], r8d
jmp case.0x180038884.81
mov qword [0x1800e2238], 0
cmp byte [r10], 0
je 0x180038f6d
mov qword [0x1800e2238], r10
jmp 0x180039021
cmp byte [rax + 1], 0x3a
je 0x180039021
mov rax, qword [rbp + 0x7f]
inc r8d
mov dword [0x18008de00], r8d
cmp r8d, dword [rax]
jl 0x18003900f
mov esi, 0xd0
mov eax, esi
sub eax, 0xd0
je 0x180038fbe
sub eax, 0x63
je 0x180038fac
cmp eax, 0x63
je case.0x180038884.80
jmp 0x180038fed
cmp byte [rdx], 0x3a
mov ebx, 0x3f
mov eax, 0x3a
cmove ebx, eax
jmp 0x180038fed
cmp dword [0x18008de04], 0
mov qword [0x18008de38], r15
je 0x180038fe6
cmp byte [rdx], 0x3a
je 0x180038fe6
mov edx, r14d
lea rcx, str.return_M.substring_1_M.length_1__
call fcn.180076140
mov rdx, qword [rbp + 0x4f]
mov dword [0x18008de08], r14d
add esi, 0x63
cmp esi, 0x1f9
jb 0x180038f93
mov r8d, dword [0x18008de00]
mov r11d, dword [0x18008de0c]
mov r9d, dword [0x18008de40]
jmp 0x18003901d
movsxd rax, r8d
mov rcx, qword [r12 + rax*8]
mov qword [0x1800e2238], rcx
mov rsi, qword [rbp + 0x7f]
inc r8d
mov qword [0x18008de38], r15
mov dword [0x18008de00], r8d
mov r10, r15
mov ebx, r14d
jmp case.0x180038884.81
mov r15d, dword [rbp - 0x19]
mov eax, dword [rbp - 0xd]
mov ecx, dword [rbp - 0x29]
cmp r15d, eax
jg 0x180039055
cmp r15d, ecx
jle 0x18003914f
cmp eax, ecx
jle 0x18003915a
mov ebx, dword [rdx]
jmp 0x1800390fd
test rdx, rdx
je 0x180038e92
lea rcx, str.set_hasBasedPtr
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov r15, qword [rbp + 0x4f]
xor ecx, ecx
test rax, rax
setne cl
movzx eax, byte [r15]
mov dword [rbp - 0x15], ecx
cmp al, 0x2d
jne 0x180039098
or dword [r13], 2
jmp 0x1800390a5
test ecx, ecx
jne 0x1800390a0
cmp al, 0x2b
jne 0x1800390ad
and dword [r13], 0xfffffffe
movzx eax, byte [r15]
cmp al, 0x2b
je 0x1800390b1
cmp al, 0x2d
jne 0x1800390be
inc r15
mov qword [rbp + 0x4f], r15
jmp 0x1800390be
mov rsi, qword [rbp + 0x7f]
mov r10, qword [0x18008de38]
mov r8d, dword [0x18008de00]
mov r11d, dword [0x18008de0c]
mov r9d, dword [0x18008de40]
jmp 0x1800390fd
mov eax, dword [rbp - 0x11]
sub eax, dword [r12]
mov r15, qword [rbp + 0x4f]
cdq
xor eax, edx
sub eax, edx
mov dword [rbp - 0xd], eax
mov eax, dword [rbp - 0x11]
sub eax, dword [r15]
cdq
xor eax, edx
sub eax, edx
mov dword [rbp - 0x29], eax
lea r15, [0x1800797a3]
mov ecx, dword [rbp - 0x41]
mov eax, dword [rbp + 0x57]
inc eax
mov dword [rbp + 0x57], eax
cmp eax, ecx
jae case.0x180038884.80
mov rdx, qword [rbp + 0x4f]
jmp 0x180038860
mov rax, qword [r12 + rdx*8]
inc r8d
mov qword [0x1800e2238], rax
mov eax, edi
mov dword [0x18008de00], r8d
jmp 0x180038e6b
lea rsi, [0x1800797a3]
mov qword [0x18008de38], rsi
jmp 0x180038e6b
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
jmp 0x180038e6b
mov eax, dword [r12]
jmp 0x180038e6b