Function at 0x14010d8c0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
push r14
push r15
sub rsp, 0x20
mov r15, rcx
mov rbx, r9
mov rcx, r8
mov r14, rdx
call fcn.1401de854
mov rdi, rax
test rax, rax
je 0x14010d908
movzx ecx, byte [rax]
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x14010d903
movzx ecx, byte [rdi + 1]
inc rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x14010d8f3
cmp byte [rdi], 0
jne 0x14010d949
mov rcx, rbx
call fcn.1401de854
mov rdi, rax
test rax, rax
je 0x14010daf3
movzx ecx, byte [rax]
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x14010d940
nop dword [rax + rax]
movzx ecx, byte [rdi + 1]
inc rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x14010d930
cmp byte [rdi], 0
je 0x14010daf3
mov qword [rsp + 0x40], rbp
mov rcx, rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], r12
call fcn.14010d7f0
mov ebp, eax
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdi + rcx], 0
jne 0x14010d966
inc rcx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
jne 0x14010d98e
lea rdx, str.Cant_get_memory_for_arguments
lea ecx, [rax + 4]
call fcn.1400e1560
mov rcx, rbx
sub rcx, rdi
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rdi]
mov byte [rcx + rdi], al
lea rdi, [rdi + 1]
test al, al
jne 0x14010d9a0
mov r8d, dword [r15]
inc r8d
add r8d, ebp
movsxd rcx, r8d
shl rcx, 3
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rsi, rax
test rax, rax
jne 0x14010d9e2
mov rcx, rbx
call case.0x1400ca6fe.0
lea rdx, str.Cant_get_memory_for_arguments
lea ecx, [rsi + 4]
call fcn.1400e1560
mov rcx, qword [r14]
mov r12, rsi
mov rdx, qword [rcx]
mov qword [rsi], rdx
add rsi, 8
add qword [r14], 8
cmp byte [rbx], 0x22
jne 0x14010da34
inc rbx
mov qword [rsi], rbx
add rsi, 8
movsx eax, byte [rbx]
test eax, eax
je 0x14010da78
nop dword [rax]
cmp eax, 0x22
je 0x14010da72
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx eax, byte [rbx]
test eax, eax
jne 0x14010da10
jmp 0x14010da78
mov qword [rsi], rbx
add rsi, 8
movsx edi, byte [rbx]
test edi, edi
je 0x14010da78
movzx ecx, dil
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
jne 0x14010da6e
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx edi, byte [rbx]
test edi, edi
jne 0x14010da42
jmp 0x14010da78
test edi, edi
je 0x14010da78
mov byte [rbx], 0
inc rbx
movsx eax, byte [rbx]
test eax, eax
je 0x14010daad
nop
movzx ecx, al
call sub.api_ms_win_crt_string_l1_1_0.dll_isspace
test eax, eax
je 0x14010d9f6
call sub.api_ms_win_crt_locale_l1_1_0.dll____mb_cur_max_func
movsxd rdx, eax
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_mblen
movsxd rcx, eax
add rbx, rcx
movsx eax, byte [rbx]
test eax, eax
jne 0x14010da80
mov eax, dword [r15]
add ebp, eax
sub eax, 1
mov dword [r15], eax
je 0x14010dad7
nop word [rax + rax]
mov rax, qword [r14]
mov rcx, qword [rax]
mov qword [rsi], rcx
add rsi, 8
add qword [r14], 8
sub dword [r15], 1
jne 0x14010dac0
mov qword [rsi], 0
mov rsi, qword [rsp + 0x48]
mov qword [r14], r12
mov r12, qword [rsp + 0x50]
mov dword [r15], ebp
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret