Function at 0x14008a640
Capabilities:
Query environment variable

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x440
mov rax, qword [0x140330030]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov r12, qword [rsp + 0x4a0]
mov rdi, r9
mov r14d, r8d
mov rbp, rdx
mov rsi, rcx
nop dword [rax + rax]
mov eax, r14d
mov rcx, rsi
xor r14d, r14d
test rdi, rdi
cmovne r14d, eax
call fcn.140084c80
test eax, eax
je 0x14008a6a2
lea rsi, str.INVALID_TITLE_WITH_QUOTES
jmp 0x14008a680
mov rcx, rbp
call fcn.140084c80
test eax, eax
je 0x14008a6b7
lea rbp, str.INVALID_DEFAULT_PATH_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
jmp 0x14008a680
mov rcx, r12
call fcn.140084c80
test eax, eax
je 0x14008a6cc
lea r12, str.INVALID_FILTER_DESCRIPTION_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
jmp 0x14008a680
xor ebx, ebx
movsxd r15, r14d
cmp rbx, r15
jge 0x14008a6f9
mov rcx, qword [rdi + rbx*8]
call fcn.140084c80
test eax, eax
jne 0x14008a6e8
inc rbx
jmp 0x14008a6d1
xor r12d, r12d
lea rsi, str.INVALID_FILTER_PATTERN_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
xor edi, edi
xor r14d, r14d
jmp 0x14008a680
cmp dword [0x140337068], 0
je 0x14008a716
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
jne 0x14008a74f
call fcn.140087820
test eax, eax
jne 0x14008a74f
lea rcx, str.SSH_CLIENT
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14008a8f0
cmp dword [0x140337060], 0
jne 0x14008a8f0
lea rcx, str.DISPLAY
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14008a8f0
call fcn.140087820
test eax, eax
je 0x14008a7cb
test rsi, rsi
je 0x14008a7bb
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a7bb
mov eax, dword [str.dialog]
mov dword [0x14035c480], eax
movzx eax, word [0x140306dd0]
mov word [0x14035c484], ax
movzx eax, byte [0x140306dd2]
mov byte [0x14035c486], al
xor eax, eax
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.14014ce80
add rsp, 0x440
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rdx, rbp
mov rcx, rsi
call fcn.140088c90
jmp 0x14008a939
test rsi, rsi
je 0x14008a810
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a810
movzx eax, word [0x140306dc8]
movsd xmm0, qword [str.basicinput]
mov word [0x14035c488], ax
movzx eax, byte [0x140306dca]
mov byte [0x14035c48a], al
movsd qword [0x14035c480], xmm0
jmp 0x14008a797
movups xmm0, xmmword [str.Open_file_from]
mov edx, 0x400
lea rcx, [0x1403370f0]
movaps xmmword [0x140339510], xmm0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__getcwd]
lea rbx, [0x140339510]
mov r8, rax
lea rcx, [rbx - 1]
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x14008a840
xor edx, edx
nop dword [rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14008a850
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140089bd0
mov rdi, rax
test rax, rax
je 0x14008a88e
mov rdx, rax
lea rax, [rsp + 0x30]
sub rax, rdx
nop
movzx ecx, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x14008a880
lea r8, [0x140173b7a]
mov rdx, rbx
mov rcx, rsi
call fcn.140089bd0
test rax, rax
je 0x14008a8c0
mov rdx, rbx
sub rdx, rax
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x14008a8b0
jmp 0x14008a8c7
mov byte [0x140339510], 0
test rdi, rdi
je 0x14008a945
lea rax, [rsp + 0x30]
sub rdi, rax
lea rcx, [rsp + 0x30]
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rdi + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008a8e0
jmp 0x14008a945
test rsi, rsi
je 0x14008a923
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a923
movabs rax, 0x73776f646e6977
mov qword [0x14035c480], rax
mov eax, 1
jmp 0x14008a799
mov r9, rdi
mov qword [rsp + 0x20], r12
mov r8d, r14d
mov rdx, rbp
mov rcx, rsi
call fcn.1400875d0
mov rbx, rax
test rax, rax
je 0x14008a797
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x14008a950
test rax, rax
je 0x14008a797
mov rcx, rbx
call fcn.1400850e0
test eax, eax
je 0x14008a797
mov rax, rbx
jmp 0x14008a799