Function at 0x14008a160
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x450
mov rax, qword [0x140330030]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov r12, qword [rsp + 0x4a0]
xor r15d, r15d
test r9, r9
mov byte [0x1403374f0], 0
mov rdi, r9
mov r14, rdx
cmovne r15d, r8d
mov rsi, rcx
call fcn.140084c80
test eax, eax
je 0x14008a1cc
mov r9, rdi
mov qword [rsp + 0x20], r12
mov r8d, r15d
lea rcx, str.INVALID_TITLE_WITH_QUOTES
mov rdx, r14
call fcn.14008a160
jmp 0x14008a311
mov rcx, r14
call fcn.140084c80
test eax, eax
je 0x14008a1f7
mov r9, rdi
mov qword [rsp + 0x20], r12
mov r8d, r15d
lea rdx, str.INVALID_DEFAULT_PATH_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
mov rcx, rsi
call fcn.14008a160
jmp 0x14008a311
mov rcx, r12
call fcn.140084c80
test eax, eax
je 0x14008a225
lea rax, str.INVALID_FILTER_DESCRIPTION_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
mov r9, rdi
mov r8d, r15d
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rsi
call fcn.14008a160
jmp 0x14008a311
mov qword [rsp + 0x448], rbx
mov qword [rsp + 0x440], rbp
movsxd rbp, r15d
test r15d, r15d
jle 0x14008a259
xor ebx, ebx
nop
mov rcx, qword [rdi + rbx*8]
call fcn.140084c80
test eax, eax
jne 0x14008a331
inc rbx
cmp rbx, rbp
jl 0x14008a240
cmp dword [0x140337068], 0
je 0x14008a276
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
jne 0x14008a2af
call fcn.140087820
test eax, eax
jne 0x14008a2af
lea rcx, str.SSH_CLIENT
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14008a4b0
cmp dword [0x140337060], 0
jne 0x14008a4b0
lea rcx, str.DISPLAY
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14008a4b0
call fcn.140087820
test eax, eax
je 0x14008a368
test rsi, rsi
je 0x14008a351
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a351
mov eax, dword [str.dialog]
mov dword [0x14035c480], eax
movzx eax, word [0x140306dd0]
mov word [0x14035c484], ax
movzx eax, byte [0x140306dd2]
mov byte [0x14035c486], al
xor eax, eax
mov rbx, qword [rsp + 0x448]
mov rbp, qword [rsp + 0x440]
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.14014ce80
add rsp, 0x450
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rcx, str.INVALID_FILTER_PATTERN_WITH_QUOTES:_use_the_GRAVE_ACCENT_x60_instead.
mov rdx, r14
call fcn.14008a160
jmp 0x14008a301
mov r8, r14
lea rcx, [0x1403374f0]
mov rdx, rsi
call fcn.140088790
jmp 0x14008a502
test rsi, rsi
je 0x14008a3b0
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a3b0
movzx eax, word [0x140306dc8]
movsd xmm0, qword [str.basicinput]
mov word [0x14035c488], ax
movzx eax, byte [0x140306dca]
mov byte [0x14035c48a], al
movsd qword [0x14035c480], xmm0
jmp 0x14008a2ff
mov eax, dword [0x140306ea8]
lea rcx, [0x1403370f0]
movsd xmm0, qword [str.Save_file_in]
mov edx, 0x400
mov dword [0x1403374f8], eax
movzx eax, word [0x140306eac]
mov word [0x1403374fc], ax
movsd qword [0x1403374f0], xmm0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__getcwd]
lea rbx, [0x1403374f0]
mov r8, rax
lea rcx, [rbx - 1]
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x14008a400
xor edx, edx
nop dword [rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14008a410
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140089bd0
mov rdi, rax
test rax, rax
je 0x14008a44e
mov rdx, rax
lea rax, [rsp + 0x30]
sub rax, rdx
nop
movzx ecx, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x14008a440
lea r8, [0x140173b7a]
mov rdx, rbx
mov rcx, rsi
call fcn.140089bd0
test rax, rax
je 0x14008a480
mov rdx, rbx
sub rdx, rax
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x14008a470
jmp 0x14008a487
mov byte [0x1403374f0], 0
test rdi, rdi
je 0x14008a50e
lea rax, [rsp + 0x30]
sub rdi, rax
lea rcx, [rsp + 0x30]
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rdi + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008a4a0
jmp 0x14008a50e
test rsi, rsi
je 0x14008a4e3
lea rdx, str.tinyfd_query
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14008a4e3
movabs rax, 0x73776f646e6977
mov qword [0x14035c480], rax
mov eax, 1
jmp 0x14008a301
mov qword [rsp + 0x28], r12
lea rcx, [0x1403374f0]
mov r9d, r15d
mov qword [rsp + 0x20], rdi
mov r8, r14
mov rdx, rsi
call fcn.140087360
mov rbx, rax
test rax, rax
je 0x14008a2ff
mov rdi, 0xffffffffffffffff
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x14008a520
test rax, rax
je 0x14008a2ff
mov edx, Ordinal_50
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strrchr]
mov rsi, rax
test rax, rax
jne 0x14008a562
lea edx, [rax + 0x5c]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strrchr]
mov rsi, rax
test rax, rax
jne 0x14008a562
mov byte [rsp + 0x30], al
jmp 0x14008a57b
sub rsi, rbx
lea rcx, [rsp + 0x30]
mov r8, rsi
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rsp + rsi + 0x30], 0
lea rcx, [rsp + 0x30]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x14008a583
test rax, rax
je 0x14008a5a3
lea rcx, [rsp + 0x30]
call fcn.140085040
test eax, eax
je 0x14008a2ff
mov edx, Ordinal_50
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strrchr]
test rax, rax
jne 0x14008a5e2
lea edx, [rax + 0x5c]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strrchr]
test rax, rax
jne 0x14008a5e2
lea rdx, [rsp + 0x30]
mov rcx, rbx
sub rdx, rbx
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008a5d2
jmp 0x14008a5fe
lea rcx, [rax + 1]
lea rdx, [rsp + 0x30]
sub rdx, rcx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008a5f0
lea rax, [rsp + 0x30]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14008a603
test rdi, rdi
je 0x14008a2ff
lea rdx, str._:____
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strpbrk]
test rax, rax
jne 0x14008a2ff
mov rax, rbx
jmp 0x14008a301