Function at 0x140143220
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
push r14
push r15
sub rsp, 0x20
mov r15, rcx
mov rbx, r9
mov rcx, r8
mov r14, rdx
call fcn.14022ac7e
mov rdi, rax
test rax, rax
je 0x140143268
movzx ecx, byte [rax]
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x140143263
movzx ecx, byte [rdi + 1]
inc rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x140143253
cmp byte [rdi], 0
jne 0x1401432a9
mov rcx, rbx
call fcn.14022ac7e
mov rdi, rax
test rax, rax
je 0x140143453
movzx ecx, byte [rax]
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x1401432a0
nop dword [rax + rax]
movzx ecx, byte [rdi + 1]
inc rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x140143290
cmp byte [rdi], 0
je 0x140143453
mov qword [rsp + 0x40], rbp
mov rcx, rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r12
call fcn.140143150
mov ebp, eax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1401432c6
inc rcx
call fcn.14022ac1e
mov rbx, rax
test rax, rax
jne 0x1401432ee
lea rdx, str.Cant_get_memory_for_arguments
lea ecx, [rax + 4]
call fcn.140106720
mov rcx, rbx
sub rcx, rdi
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdi]
mov byte [rcx + rdi], al
lea rdi, [rdi + 1]
test al, al
jne 0x140143300
mov r8d, dword [r15]
inc r8d
add r8d, ebp
movsxd rcx, r8d
shl rcx, 3
call fcn.14022ac1e
mov rsi, rax
test rax, rax
jne 0x140143342
mov rcx, rbx
call case.0x1400ef54e.0
lea rdx, str.Cant_get_memory_for_arguments
lea ecx, [rsi + 4]
call fcn.140106720
mov rcx, qword [r14]
mov r12, rsi
mov rdx, qword [rcx]
mov qword [rsi], rdx
add rsi, 8
add qword [r14], 8
cmp byte [rbx], 0x22
jne 0x140143394
inc rbx
mov qword [rsi], rbx
add rsi, 8
movsx eax, byte [rbx]
test eax, eax
je 0x1401433d8
nop dword [rax]
cmp eax, 0x22
je 0x1401433d2
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx eax, byte [rbx]
test eax, eax
jne 0x140143370
jmp 0x1401433d8
mov qword [rsi], rbx
add rsi, 8
movsx edi, byte [rbx]
test edi, edi
je 0x1401433d8
movzx ecx, dil
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x1401433ce
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx edi, byte [rbx]
test edi, edi
jne 0x1401433a2
jmp 0x1401433d8
test edi, edi
je 0x1401433d8
mov byte [rbx], 0
inc rbx
movsx eax, byte [rbx]
test eax, eax
je 0x14014340d
nop
movzx ecx, al
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x140143356
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx eax, byte [rbx]
test eax, eax
jne 0x1401433e0
mov eax, dword [r15]
add ebp, eax
sub eax, 1
mov dword [r15], eax
je 0x140143437
nop word [rax + rax]
mov rax, qword [r14]
mov rcx, qword [rax]
mov qword [rsi], rcx
add rsi, 8
add qword [r14], 8
sub dword [r15], 1
jne 0x140143420
mov qword [rsi], 0
mov rsi, qword [rsp + 0x48]
mov qword [r14], r12
mov r12, qword [rsp + 0x50]
mov dword [r15], ebp
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret