Function at 0x14007bd70
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0xc30
mov rax, qword [0x14016f898]
xor rax, rsp
mov qword [rsp + 0xc20], rax
mov rdi, rdx
mov rbx, rcx
test rbx, rbx
je 0x14007bdc5
mov edx, 0x27
mov rcx, rbx
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x14007bdbc
lea edx, [rax + 0x22]
mov rcx, rbx
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x14007bdc5
lea rbx, str.INVALID_TITLE_WITH_QUOTES
jmp 0x14007bd95
test rdi, rdi
je 0x14007bdf5
mov edx, 0x27
mov rcx, rdi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
jne 0x14007bdec
lea edx, [rax + 0x22]
mov rcx, rdi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
je 0x14007bdf5
lea rdi, str.INVALID_DEFAULT_PATH_WITH_QUOTES
jmp 0x14007bd95
cmp dword [0x140173188], 0
je 0x14007be12
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
jne 0x14007be35
call fcn.1400784a0
test eax, eax
jne 0x14007be35
lea rcx, str.SSH_CLIENT
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14007c00b
call fcn.1400787e0
test eax, eax
jne 0x14007c00b
call fcn.1400784a0
test eax, eax
je 0x14007bec3
test rbx, rbx
je 0x14007bea4
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14007bea4
mov eax, dword [str.dialog]
mov dword [0x1401800c0], eax
movzx eax, word [0x140111504]
mov word [0x1401800c4], ax
movzx eax, byte [0x140111506]
mov byte [0x1401800c6], al
xor eax, eax
mov rcx, qword [rsp + 0xc20]
xor rcx, rsp
call fcn.1400f2dc0
mov rbx, qword [rsp + 0xc58]
add rsp, 0xc30
pop rdi
ret
mov r8, rdi
lea rcx, [0x1401759e0]
mov rdx, rbx
call fcn.140079950
mov rdi, rax
test rax, rax
je 0x14007be81
jmp 0x14007c13e
test rbx, rbx
je 0x14007bf0b
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14007bf0b
movzx eax, word [0x140111510]
movsd xmm0, qword [str.basicinput]
mov word [0x1401800c8], ax
movzx eax, byte [0x140111512]
mov byte [0x1401800ca], al
movsd qword [0x1401800c0], xmm0
jmp 0x14007be81
movups xmm0, xmmword [str.Select_folder_from]
mov eax, dword [0x140111608]
lea rcx, [0x1401731a0]
mov edx, 0x400
mov qword [rsp + 0xc50], rsi
movaps xmmword [0x1401759e0], xmm0
mov dword [0x1401759f0], eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__getcwd]
lea rdi, [0x1401759e0]
mov r8, rax
lea rcx, [rdi - 1]
nop dword [rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x14007bf50
xor edx, edx
nop dword [rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x14007bf60
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140079e30
mov rsi, rax
test rax, rax
je 0x14007bf9e
mov rdx, rax
lea rax, [rsp + 0x20]
sub rax, rdx
nop
movzx ecx, byte [rdx]
mov byte [rax + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007bf90
lea r8, [0x1400fb69c]
mov rdx, rdi
mov rcx, rbx
call fcn.140079e30
test rax, rax
je 0x14007bfd0
mov rdx, rdi
sub rdx, rax
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x14007bfc0
jmp 0x14007bfd7
mov byte [0x1401759e0], 0
test rsi, rsi
je 0x14007bffe
lea rax, [rsp + 0x20]
sub rsi, rax
lea rcx, [rsp + 0x20]
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rsi + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14007bff0
mov rsi, qword [rsp + 0xc50]
jmp 0x14007c13e
test rbx, rbx
je 0x14007c03e
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x14007c03e
movabs rax, 0x73776f646e6977
mov qword [0x1401800c0], rax
mov eax, 1
jmp 0x14007be83
xor edx, edx
lea rcx, [rsp + 0x20]
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x420]
mov r8d, 0x800
call sub.VCRUNTIME140.dll_memset
test rbx, rbx
je 0x14007c0a0
cmp dword [0x14016a9a0], 0
mov rcx, rbx
je 0x14007c07d
call fcn.14007c520
jmp 0x14007c082
call fcn.14007af00
lea rdx, [rsp + 0x20]
mov rcx, rax
sub rdx, rax
nop dword [rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14007c090
test rdi, rdi
je 0x14007c0e0
cmp dword [0x14016a9a0], 0
mov rcx, rdi
je 0x14007c0b8
call fcn.14007c520
jmp 0x14007c0bd
call fcn.14007af00
lea rdx, [rsp + 0x420]
mov rcx, rax
sub rdx, rax
nop dword [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14007c0d0
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x20]
call fcn.14007c170
test rax, rax
je 0x14007be81
cmp dword [0x14016a9a0], 0
mov rcx, rax
je 0x14007c10e
call fcn.14007c370
jmp 0x14007c113
call fcn.14007c450
lea rdi, [0x1401759e0]
mov rcx, rax
mov rdx, rdi
sub rdx, rax
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14007c130
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x14007c145
test rax, rax
je 0x14007be81
mov rcx, rdi
call fcn.1400785d0
test eax, eax
je 0x14007be81
mov rax, rdi
jmp 0x14007be83