Function at 0x140005c64
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
sub rsp, 0x2b0
mov rax, qword [0x1400502a8]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov rsi, rdx
mov rdi, rcx
mov ebx, 0x5c
lea rcx, [rsp + 0x40]
mov r8d, ebx
xor edx, edx
call sub.msvcrt.dll_memset
xor r9d, r9d
lea edx, [rbx - 0x2b]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [rsp + 0x40]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetObjectW]
xor ebp, ebp
test eax, eax
je 0x140005d76
lea rdx, str.Tahoma
lea rcx, [rsp + 0x5c]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x140005d76
mov rcx, qword [0x140050d10]
lea r8, [rsp + 0xa0]
mov r9d, 0x100
lea edx, [rbx + 0x27]
call qword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x140005d76
lea r8d, [rbx - 0x4f]
lea rdx, str.4084208022
lea rcx, [rsp + 0xa0]
call qword [sym.imp.msvcrt.dll__wcsnicmp]
test eax, eax
jne 0x140005d76
mov rcx, qword [0x140050310]
cmp rcx, 0xffffffffffffffff
jne 0x140005d4c
lea edx, [rbx - 0x5a]
call fcn.140016148
mov rcx, qword [0x140050310]
cmp rcx, 0xffffffffffffffff
je 0x140005d76
cmp dword [0x1400516e0], 2
jl 0x140005d76
lea r9, [rsp + 0x30]
mov dword [rsp + 0x30], ebp
mov r8d, 0x82
mov qword [rsp + 0x20], rbp
lea rdx, str.ERROR:_Localization_of_this_build_is_incorrect.__The_dialog_font_has_been_changed_but_the_button_placement_has_not_been_updated._r_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDC]
mov r14d, 1
mov rcx, rax
mov edx, r14d
mov rbx, rax
call qword [sym.imp.GDI32.dll_SetMapMode]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
movsxd r8, dword [0x140050cd8]
mov rax, qword [str.6ij]
lea rcx, [r8 + r8*2]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 2
je 0x140005df1
test r8d, r8d
je 0x140005df1
cmp qword [0x140050ba0], rbp
jne 0x140005e0c
mov r9, rsi
mov dword [rsp + 0x20], 2
mov edx, 0x82
mov r8d, 0x9981
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050ba0], rax
jmp 0x140005e05
mov rcx, qword [0x140050ba0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050ba0], rbp
mov r8d, dword [0x140050cd8]
movsxd rax, r8d
mov ebx, 0x4b
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], r14b
je 0x140005ea0
mov rax, qword [0x140050c28]
test rax, rax
jne 0x140005e61
mov r9, rsi
mov dword [rsp + 0x20], r14d
lea edx, [rbx + 0x38]
mov r8d, 0x9980
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050c28], rax
test rax, rax
je 0x140005eb4
mov r8d, dword [0x140050cd8]
movsxd rcx, r8d
lea rdx, [rcx + rcx*2]
mov rcx, qword [str.6ij]
add rdx, rdx
cmp bx, word [rcx + rdx*8]
jne 0x140005e7c
xor edx, edx
jmp 0x140005e83
mov edx, dword [rcx + rdx*8 + 0x28]
and edx, r14d
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [0x140050c28]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140005eb4
mov rcx, qword [0x140050c28]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050c28], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 4
je 0x140005efd
cmp qword [0x140050c80], rbp
jne 0x140005f11
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x84
mov r8d, 0x9982
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050c80], rax
jmp 0x140005f11
mov rcx, qword [0x140050c80]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050c80], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 0x10
mov rcx, qword [0x140050c20]
je 0x140005f68
test rcx, rcx
jne 0x140005f5d
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x88
mov r8d, 0x9984
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050c20], rax
jmp 0x140005f75
mov edx, r14d
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x140005f75
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050c20], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 8
mov rcx, qword [0x140051648]
je 0x140005ffc
test rcx, rcx
jne 0x140005fc4
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x85
mov r8d, 0x9983
mov rcx, rdi
call fcn.1400061c4
mov r8, rax
mov qword [0x140051648], rax
jmp 0x140005fd4
mov edx, r14d
call qword [sym.imp.USER32.dll_EnableWindow]
mov r8, qword [0x140051648]
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
cmp bx, word [rax + rcx*8]
jne 0x140006009
xor edx, edx
mov rcx, r8
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x140006009
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140051648], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test dword [rax + rcx*8 + 0x28], 0x100
je 0x140006055
cmp qword [0x140050c10], rbp
jne 0x140006069
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x8b
mov r8d, 0x9988
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050c20], rax
jmp 0x140006069
mov rcx, qword [0x140050c10]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050c10], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 0x20
je 0x1400060b2
cmp qword [0x140050cb0], rbp
jne 0x1400060c6
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x89
mov r8d, 0x9985
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050cb0], rax
jmp 0x1400060c6
mov rcx, qword [0x140050cb0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050cb0], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 0x80
je 0x140006112
cmp qword [0x140050b58], rbp
jne 0x140006126
mov r9, rsi
mov dword [rsp + 0x20], 2
mov edx, 0x87
mov r8d, 0x9987
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050b58], rax
jmp 0x140006126
mov rcx, qword [0x140050b58]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050b58], rbp
movsxd rax, dword [0x140050cd8]
lea rcx, [rax + rax*2]
mov rax, qword [str.6ij]
add rcx, rcx
test byte [rax + rcx*8 + 0x28], 0x40
je 0x140006177
cmp qword [0x140050b90], rbp
jne 0x14000618b
cmp dword [0x140051668], ebp
jne 0x14000618b
mov r9, rsi
mov dword [rsp + 0x20], r14d
mov edx, 0x86
mov r8d, 0x9986
mov rcx, rdi
call fcn.1400061c4
mov qword [0x140050b90], rax
jmp 0x14000618b
mov rcx, qword [0x140050b90]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x140050b90], rbp
mov rcx, rdi
call fcn.140005b8c
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.14003c6c0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret