Function at 0x140026840
Capabilities:
Query environment variable

Disassembly:
push rbp
push r12
sub rsp, 0x458
movzx eax, byte [rcx + 1]
movzx ebp, r8b
mov r12, rcx
cmp edx, eax
jl 0x140026867
xor eax, eax
add rsp, 0x458
pop r12
pop rbp
ret
mov qword [rsp + 0x440], r13
movsxd r13, edx
shl r13, 5
add r13, qword [rcx + 8]
cmp byte [r13], 0
jne 0x140026896
xor eax, eax
mov r13, qword [rsp + 0x440]
add rsp, 0x458
pop r12
pop rbp
ret
mov qword [rsp + 0x448], rdi
mov rdi, qword [r13 + 8]
cmp word [rdi], 0
jne 0x1400268b1
mov rax, qword [r13 + 0x10]
jmp 0x140026c9d
mov qword [rsp + 0x480], rbx
mov qword [rsp + 0x450], rsi
lea rsi, [0x140106b10]
mov qword [rsp + 0x438], r14
mov r14, qword [r13 + 0x10]
mov qword [rsp + 0x430], r15
xor r15d, r15d
mov ebx, r15d
test r14, r14
je 0x140026a1b
mov rax, qword [r14]
test rax, rax
je 0x140026a1b
cmp rdi, rax
jae 0x14002691c
nop dword [rax]
cmp rbx, 0xfd
jae 0x140026925
movzx eax, word [rdi]
add rdi, 2
mov word [rsi + rbx*2], ax
inc rbx
cmp rdi, qword [r14]
jb 0x140026900
cmp rbx, 0xfd
jb 0x14002692e
cmp rdi, qword [r14]
jb 0x140026a63
mov rsi, qword [r14 + 8]
movzx ecx, byte [rsi + 0x23]
test ecx, ecx
je 0x1400269d0
sub ecx, 1
je 0x14002697a
sub ecx, 1
je 0x14002695b
cmp ecx, 1
je 0x1400269bd
mov rdx, qword [rsi + 0x28]
xor ecx, ecx
call qword [rsi + reloc.OLEAUT32.dll_SafeArrayGetElement]
jmp 0x1400269db
xor edx, edx
lea rcx, [0x140105138]
call fcn.140004ba0
mov rcx, rax
mov eax, 0xffffffff
cmp rcx, rax
cmove rcx, r15
jmp 0x1400269de
mov rcx, rsi
call fcn.140001340
cmp dword [0x140102d04], r15d
jne 0x1400269c2
cmp qword [rsi + 0x10], r15
jne 0x1400269c2
mov rcx, qword [rsi + 0x28]
lea rdx, [rsp + 0x478]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x1400269b6
mov qword [0x140106ae0], r15
lea ecx, [rax - 1]
jmp 0x1400269de
mov qword [0x140106ae0], rsi
mov rcx, r15
jmp 0x1400269de
mov rcx, qword [rsi + 0x10]
shr rcx, 1
jmp 0x1400269de
mov rcx, qword [rsi + 0x10]
xor edx, edx
call fcn.14008c760
mov rcx, rax
mov eax, 0xfd
sub rax, rbx
cmp rcx, rax
ja 0x140026a63
mov rcx, qword [r14 + 8]
lea rsi, [0x140106b10]
lea rdx, [rsi + rbx*2]
call fcn.14008c760
add rbx, rax
movzx eax, word [r14 + 0x12]
add r14, 0x18
lea rdi, [rdi + rax*2]
mov rax, qword [r14]
test rax, rax
jne 0x1400268f7
movzx eax, word [rdi]
test ax, ax
je 0x140026a3f
cmp rbx, 0xfd
jae 0x140026a48
add rdi, 2
mov word [rsi + rbx*2], ax
inc rbx
movzx eax, word [rdi]
test ax, ax
jne 0x140026a23
cmp rbx, 0xfd
jb 0x140026a4e
cmp word [rdi], r15w
jne 0x140026a63
test rbx, rbx
jne 0x140026a73
mov r9, qword [r13 + 8]
lea rdx, str.This_dynamic_variable_is_blank._If_this_variable_was_not_intended_to_be_dynamic__remove_the___symbols_from_it.
jmp 0x140026c70
mov r9, qword [r13 + 8]
lea rdx, str.This_dynamically_built_variable_name_is_too_long.__If_this_variable_was_not_intended_to_be_dynamic__remove_the___symbols_from_it.
jmp 0x140026c70
mov rax, qword gs:[0x58]
mov edx, 4
mov word [rsi + rbx*2], r15w
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140106d0c], eax
jle 0x140026ae2
lea rcx, [0x140106d0c]
call fcn.1400a4dec
cmp dword [0x140106d0c], 0xffffffff
jne 0x140026ae2
lea rax, [0x1401043f4]
mov qword [0x140106d20], r15
lea rcx, [0x140106d0c]
mov qword [0x140106d18], rax
mov dword [0x140106d30], 0x1000400
mov qword [0x140106d38], rsi
mov qword [0x140106d28], r15
call fcn.1400a4d8c
test bpl, bpl
jne 0x140026bd5
cmp word [0x140106b10], r15w
je 0x140026c7b
mov rdi, rsi
nop dword [rax]
movzx ebp, word [rdi]
mov esi, ebp
mov ecx, ebp
and esi, 0xffffff80
jne 0x140026b1a
mov edx, 0x107
call fcn.1400ab814
test eax, eax
jne 0x140026b32
test esi, esi
jne 0x140026b32
movzx edx, bp
lea rcx, [0x1400eb400]
call fcn.1400a71d8
test rax, rax
je 0x140026b87
add rdi, 2
cmp word [rdi], r15w
jne 0x140026b00
lea rsi, [0x140106b10]
mov qword [rsp + 0x28], r15
lea rcx, [0x1401044f0]
xor r9d, r9d
mov dword [rsp + 0x20], 3
mov r8, rbx
mov rdx, rsi
call fcn.140026d50
test rax, rax
jne 0x140026c7d
mov rcx, rsi
call fcn.1400275d0
test rax, rax
jne 0x140026bd5
lea rax, [0x140106d10]
jmp 0x140026c7d
lea rsi, [0x140106b10]
mov edx, 0x200
lea r9, str.variable
mov qword [rsp + 0x20], rsi
lea r8, str.The_following__s_name_contains_an_illegal_character:_n___1.300s_
lea rcx, [rsp + 0x30]
call fcn.140088e40
lea r8, [0x1400ccf5c]
lea rdx, [rsp + 0x30]
lea rcx, [0x1401044f0]
call fcn.140036c40
test eax, eax
je 0x140026c7b
jmp 0x140026b43
cmp word [0x140106b10], r15w
je 0x140026c7b
lea rax, [rsp + 0x478]
mov r8, rbx
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x470]
mov rdx, rsi
mov dword [rsp + 0x20], 3
lea rcx, [0x1401044f0]
call fcn.140026d50
test rax, rax
jne 0x140026c4a
cmp byte [rsp + 0x478], r15b
lea rcx, [0x1401044f0]
mov r9d, dword [rsp + 0x470]
mov r8, rbx
setne r15b
mov rdx, rsi
inc r15d
mov dword [rsp + 0x20], r15d
call fcn.140027040
test rax, rax
je 0x140026c7b
cmp byte [r13], 2
jne 0x140026c7d
movzx ecx, byte [rax + 0x23]
test cl, cl
jne 0x140026c61
mov rcx, qword [rax + 0x10]
movzx ecx, byte [rcx + 0x23]
cmp cl, 2
jbe 0x140026c7d
mov r9, rsi
lea rdx, str.Not_allowed_as_an_output_variable.
xor r8d, r8d
mov rcx, r12
call fcn.1400368c0
xor eax, eax
mov r14, qword [rsp + 0x438]
mov rbx, qword [rsp + 0x480]
mov rsi, qword [rsp + 0x450]
mov r15, qword [rsp + 0x430]
mov rdi, qword [rsp + 0x448]
mov r13, qword [rsp + 0x440]
add rsp, 0x458
pop r12
pop rbp
ret