Function at 0x1400ab240
Capabilities:
Query environment variable

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x458
mov r11d, dword [0x14087f624]
mov byte [0x14087f640], 0
test r11d, r11d
mov rbx, rcx
mov rsi, rdx
mov rbp, r8
mov rdi, r9
jne 0x1400ab368
lea rcx, str.SSH_CLIENT
call sub.msvcrt.dll_getenv
test rax, rax
je 0x1400ab293
mov r10d, dword [0x14087f620]
test r10d, r10d
je 0x1400ab550
lea r12, [rsp + 0x50]
test rbx, rbx
je 0x1400ab2dc
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x1400ab5d8
mov r9d, dword [0x140176b98]
mov rcx, rbx
test r9d, r9d
jne 0x1400ab540
call fcn.1400a68b0
mov rdx, rax
lea r12, [rsp + 0x50]
mov rcx, r12
call sub.msvcrt.dll_wcscpy
lea rbx, [rsp + 0x30]
test rsi, rsi
je 0x1400ab30e
mov r8d, dword [0x140176b98]
mov rcx, rsi
test r8d, r8d
jne 0x1400ab530
call fcn.1400a68b0
mov rdx, rax
lea rbx, [rsp + 0x30]
mov rcx, rbx
call sub.msvcrt.dll_wcscpy
mov rcx, r12
mov r9, rdi
mov r8, rbp
mov rdx, rbx
call fcn.1400a8500
test rax, rax
mov rcx, rax
je 0x1400ab51b
mov edx, dword [0x140176b98]
test edx, edx
jne 0x1400ab520
call fcn.1400a6b50
mov rdx, rax
lea rcx, [0x14087f630]
call sub.msvcrt.dll_strcpy
lea rcx, [0x14087f640]
mov rdx, rax
call sub.msvcrt.dll_strcpy
jmp 0x1400ab4bf
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
je 0x1400ab570
call fcn.1400a5760
test eax, eax
je 0x1400ab4e0
test rbx, rbx
je 0x1400ab3a0
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x1400ab5f8
test rsi, rsi
je 0x1400ab588
lea rcx, [0x14087f640]
mov r8d, 7
mov rdx, rsi
call sub.msvcrt.dll_strncpy
mov byte [0x14087f647], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.1400a8f50
test rax, rax
mov rbp, rax
je 0x1400ab3e6
lea rcx, [rsp + 0x50]
mov rdx, rax
call sub.msvcrt.dll_strcpy
lea r8, [0x14087f640]
mov rcx, rbx
lea rdx, str.Enter_hex_rgb_color__i.e._f5ca20_
call fcn.1400a8f50
test rax, rax
mov rsi, rax
je 0x1400ab51b
mov rcx, rax
call sub.msvcrt.dll_strlen
cmp rax, 7
jne 0x1400ab51b
cmp byte [rsi], 0x23
jne 0x1400ab51b
mov r12, qword [sym.imp.msvcrt.dll_isxdigit]
lea rbx, [rsi + 1]
lea r13, [rsi + 7]
movsx ecx, byte [rbx]
call r12
test eax, eax
je 0x1400ab51b
add rbx, 1
cmp r13, rbx
jne 0x1400ab432
test rdi, rdi
je 0x1400ab49e
mov rax, qword [rsi]
lea rcx, [rsp + 0x35]
mov r8d, 0x10
xor edx, edx
mov qword [rsp + 0x30], rax
call sub.msvcrt.dll_strtoul
lea rcx, [rsp + 0x33]
mov r8d, 0x10
xor edx, edx
mov byte [rdi + 2], al
mov byte [rsp + 0x35], 0
call sub.msvcrt.dll_strtoul
lea rcx, [rsp + 0x31]
mov r8d, 0x10
xor edx, edx
mov byte [rdi + 1], al
mov byte [rsp + 0x33], 0
call sub.msvcrt.dll_strtoul
mov byte [rdi], al
lea rcx, [0x14087f640]
mov rdx, rsi
call sub.msvcrt.dll_strcpy
test rbp, rbp
je 0x1400ab4bf
lea rdx, [rsp + 0x50]
mov rcx, rbp
call sub.msvcrt.dll_strcpy
lea rax, [0x14087f640]
add rsp, 0x458
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
test rbx, rbx
je 0x1400ab3a0
lea rdx, str.tinyfd_query
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400ab3a0
movabs rax, 0x706e696369736162
mov qword [0x14087f220], rax
mov dword [0x14087f227], 0x747570
xor eax, eax
jmp 0x1400ab4c6
call fcn.1400a6c50
mov rdx, rax
jmp 0x1400ab341
call fcn.1400a6970
mov rdx, rax
jmp 0x1400ab301
call fcn.1400a6970
mov rdx, rax
jmp 0x1400ab2cf
lea rcx, [0x1401a5837]
call sub.msvcrt.dll_getenv
test rax, rax
jne 0x1400ab293
jmp 0x1400ab377
call fcn.1400a5760
test eax, eax
je 0x1400ab272
jmp 0x1400ab377
test rbp, rbp
je 0x1400ab5c0
movzx eax, byte [rbp + 2]
lea rdx, str._02hhx_02hhx_02hhx
lea rcx, [0x14087f640]
mov dword [rsp + 0x20], eax
movzx r9d, byte [rbp + 1]
movzx r8d, byte [rbp]
call fcn.1400a5eb0
jmp 0x1400ab3c5
xor eax, eax
mov byte [0x14087f642], 0
mov word [0x14087f640], ax
jmp 0x1400ab3c5
movabs rax, 0x73776f646e6977
mov qword [0x14087f220], rax
mov eax, 1
jmp 0x1400ab4c6
mov dword [0x14087f220], 0x6c616964
xor eax, eax
mov dword [0x14087f223], 0x676f6c
jmp 0x1400ab4c6