Function at 0x140079e30
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x850
mov rax, qword [0x14016f898]
xor rax, rsp
mov qword [rsp + 0x840], rax
mov rdi, rcx
mov rbp, r8
mov ecx, 0xfffffff6
mov rsi, rdx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ebx, ebx
lea r13, [0x1401751e0]
mov r15d, ebx
mov r12d, ebx
test rdi, rdi
jne 0x140079e93
test rsi, rsi
jne 0x140079ec2
test rbp, rbp
jne 0x140079ef8
mov rax, r13
jmp 0x14007a398
mov edx, 0x27
mov rcx, rdi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x14007a386
lea edx, [rax + 0x22]
mov rcx, rdi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x14007a386
test rsi, rsi
je 0x140079ef3
mov edx, 0x27
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x140079ee4
lea edx, [rax + 0x22]
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x140079ef3
lea rdx, str.INVALID_MESSAGE_WITH_QUOTES
mov rcx, rdi
jmp 0x14007a390
test rbp, rbp
je 0x140079f2c
mov edx, 0x27
mov rcx, rbp
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x140079f1a
lea edx, [rax + 0x22]
mov rcx, rbp
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x140079f2c
lea r8, str.INVALID_DEFAULT_INPUT_WITH_QUOTES
mov rdx, rsi
mov rcx, rdi
jmp 0x14007a393
mov ecx, 0xfffffff6
mov dword [rsp + 0x30], ebx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp dword [0x140173188], ebx
mov r14, rax
je 0x140079f5a
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
jne 0x140079f7d
call fcn.1400784a0
test eax, eax
jne 0x140079f7d
lea rcx, str.SSH_CLIENT
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14007a332
call fcn.1400787e0
test eax, eax
jne 0x14007a332
call fcn.1400784a0
test eax, eax
je 0x140079fe8
test rdi, rdi
je 0x140079fcc
lea rdx, str.tinyfd_query
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140079fcc
mov eax, dword [str.dialog]
mov dword [0x1401800c0], eax
movzx eax, word [0x140111504]
mov word [0x1401800c4], ax
movzx eax, byte [0x140111506]
mov byte [0x1401800c6], al
xor eax, eax
jmp 0x14007a398
mov r9, rbp
mov byte [0x1401751e0], bl
mov r8, rsi
mov rdx, rdi
mov rcx, r13
call fcn.140078950
jmp 0x14007a379
test rdi, rdi
je 0x14007a032
lea rdx, str.tinyfd_query
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14007a032
movzx eax, word [0x140111510]
movsd xmm0, qword [str.basicinput]
mov word [0x1401800c8], ax
movzx eax, byte [0x140111512]
mov byte [0x1401800ca], al
xor eax, eax
movsd qword [0x1401800c0], xmm0
jmp 0x14007a398
cmp dword [0x140173190], ebx
mov byte [0x1401751e0], bl
jne 0x14007a078
cmp dword [0x140173188], ebx
jne 0x14007a078
lea rdx, str.missing_software___we_will_try_basic_console_input_
mov dword [0x140173190], 1
lea rcx, str._n_n_s_n
call fcn.1400798f0
lea rdx, str._____________n______________n_tiny_file__n__dialogs___n_____________n_______ntiny_file_dialogs_on_Windows_needs:_n___a_graphic_display_nor_dialog.exe__curses_console_mode__nor_a_console_for_basic_input
lea rcx, str._s_n_n
call fcn.1400798f0
cmp dword [0x14016a9a0], ebx
jne 0x14007a0ae
call qword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov rbx, 0xffffffffffffffff
test rdi, rdi
je 0x14007a108
mov rax, rbx
nop dword [rax]
inc rax
cmp byte [rdi + rax], 0
jne 0x14007a0c0
test rax, rax
je 0x14007a108
lea rcx, [0x14010e760]
call fcn.1400798f0
cmp dword [0x14016a9a0], 0
je 0x14007a0ed
mov rcx, rdi
call fcn.14007c5f0
jmp 0x14007a0fc
mov rdx, rdi
lea rcx, [0x1400fc274]
call fcn.1400798f0
lea rcx, [0x140111524]
call fcn.1400798f0
test rsi, rsi
je 0x14007a14c
mov rax, rbx
inc rax
cmp byte [rsi + rax], 0
jne 0x14007a110
test rax, rax
je 0x14007a14c
cmp dword [0x14016a9a0], 0
je 0x14007a131
mov rcx, rsi
call fcn.14007c5f0
jmp 0x14007a140
mov rdx, rsi
lea rcx, [0x1400fc274]
call fcn.1400798f0
lea rcx, [0x14010e760]
call fcn.1400798f0
lea rcx, str._ctrl_Z__enter_to_cancel_:
call fcn.1400798f0
test rbp, rbp
jne 0x14007a17b
lea rdx, [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rsp + 0x30]
mov rcx, r14
and edx, 0xfffffffb
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
cmp dword [0x14016a9a0], 0
je 0x14007a286
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edi, edi
lea r9, [rsp + 0x34]
mov rcx, rax
mov qword [rsp + 0x20], rdi
mov r8d, 0x400
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
test rbp, rbp
jne 0x14007a1d1
mov edx, dword [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, [0x14010e760]
call fcn.1400798f0
mov eax, dword [rsp + 0x34]
add rax, rax
cmp rax, 0x800
jae 0x14007a3c3
mov word [rsp + rax + 0x40], di
lea rcx, [rsp + 0x40]
mov rax, rbx
cmp word [rcx + rax*2 + 2], di
lea rax, [rax + 1]
jne 0x14007a1f1
cmp word [rsp + rax*2 + 0x3e], 0xa
jne 0x14007a21d
lea rax, [rax*2 - 2]
cmp rax, 0x800
jae 0x14007a3c3
mov word [rsp + rax + 0x40], di
lea rax, [rsp + 0x40]
cmp word [rax + rbx*2 + 2], di
lea rbx, [rbx + 1]
jne 0x14007a222
cmp word [rsp + rbx*2 + 0x3e], 0xd
jne 0x14007a24f
lea rbx, [rbx*2 - 2]
cmp rbx, 0x800
jae 0x14007a3c3
mov word [rsp + rbx + 0x40], di
lea rcx, [rsp + 0x40]
call fcn.14007c370
test rax, rax
je 0x140079fc5
mov rdx, r13
sub rdx, rax
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x14007a270
mov rax, r13
jmp 0x14007a398
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov edx, 0x400
mov rcx, r13
mov r8, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
mov rdi, rax
test rbp, rbp
jne 0x14007a2c0
mov edx, dword [rsp + 0x30]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, [0x14010e760]
call fcn.1400798f0
cmp dword [0x14016a9a0], 0
jne 0x14007a2db
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
test rdi, rdi
je 0x140079fc5
lea rcx, [0x14010e760]
call fcn.1400798f0
mov edx, 0x1b
mov rcx, r13
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x140079fc5
inc rbx
cmp byte [rbx + r13], 0
jne 0x14007a306
cmp byte [rbx + r13 - 1], 0xa
jne 0x14007a381
dec rbx
cmp rbx, 0x400
jae 0x14007a3c3
mov byte [rbx + r13], 0
mov rax, r13
jmp 0x14007a398
test rdi, rdi
je 0x14007a362
lea rdx, str.tinyfd_query
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14007a362
movabs rax, 0x73776f646e6977
mov qword [0x1401800c0], rax
mov eax, 1
jmp 0x14007a398
mov r9, rbp
mov byte [0x1401751e0], bl
mov r8, rsi
mov rdx, rdi
mov rcx, r13
call fcn.140079020
test eax, eax
je 0x140079fc5
mov rax, r13
jmp 0x14007a398
mov rdx, rsi
lea rcx, str.INVALID_TITLE_WITH_QUOTES
mov r8, rbp
call fcn.140079e30
mov rcx, qword [rsp + 0x840]
xor rcx, rsp
call fcn.1400f2dc0
mov rbx, qword [rsp + 0x8a8]
add rsp, 0x850
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400f365c
int3