Function at 0x140006029
Capabilities:
Check if file exists
Get file attributes
Identify system language via api

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov rax, qword [0x140010cd0]
mov rdi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov rdx, qword [0x140010d30]
mov rsi, qword [rdx]
movzx edx, ax
lea rcx, [rsi + 0x30000]
add rsi, 0x2a000
call fcn.140008b53
call fcn.140004be7
mov r12, qword [0x140010cb0]
mov rbp, qword [0x140010c90]
mov rcx, rsi
mov eax, dword [r12]
mov dword [rbp + 0x1c], 0x10000
and eax, 0x20
mov dword [rbp], eax
call fcn.1400091ec
test eax, eax
jne 0x140006167
cmp dword [rdi + 0x68], 0
je 0x140006167
mov ecx, dword [rdi + 0x6c]
call fcn.140008c9c
mov ecx, dword [rdi + 0x68]
mov rbx, rax
call fcn.140008c9c
xor r11d, r11d
movsxd rcx, dword [rdi + 0x64]
mov r8, rbx
mov dword [rsp + 0x20], r11d
mov r9, qword [0x140010da0]
mov r13, rax
mov rdx, rax
call fcn.140008abf
mov rcx, r13
call fcn.140008d22
mov rcx, rbx
call fcn.140008d22
mov rbx, qword [0x140010da0]
mov ax, word [rbx]
test ax, ax
je 0x140006167
cmp ax, 0x22
jne 0x140006112
add rbx, 2
mov edx, 0x22
mov rcx, rbx
call main
mov word [rax], 0
mov rcx, rbx
call sub.KERNEL32.dll_lstrlenW
cdqe
add rax, rax
lea rcx, [rbx + rax - 8]
cmp rbx, rcx
jae 0x140006154
lea rdx, str..exe
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x140006154
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14000614c
test al, 0x10
jne 0x140006154
mov rcx, rbx
call fcn.1400085fb
mov rcx, rbx
call fcn.140008c2e
mov rcx, rsi
mov rdx, rax
call fcn.140008c13
mov rcx, rsi
call fcn.1400091ec
test eax, eax
jne 0x140006181
mov edx, dword [rdi + 0x138]
mov rcx, rsi
call fcn.140009635
test byte [r12], 0x10
je 0x1400061a6
mov rax, qword [0x140010d00]
cmp dword [rax], 0
jne 0x1400061a6
call fcn.140005b71
mov rax, qword [0x140010d60]
mov dword [rax], 1
mov rbx, qword [0x140010cc0]
xor r10d, r10d
xor r9d, r9d
mov r8d, 1
mov dword [rsp + 0x28], 0x8040
mov edx, 0x67
mov dword [rsp + 0x20], r10d
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_LoadImageW]
cmp dword [rdi + 0x70], 0xffffffff
mov qword [0x140035320], rax
je 0x14000629c
mov rdx, qword [0x140010be0]
lea rsi, [0x14000e2ec]
mov qword [0x14003d3a0], rax
lea rcx, [0x14003d380]
mov qword [0x14003d3c0], rsi
mov qword [0x14003d388], rdx
mov rdx, qword [rbx]
mov qword [0x14003d398], rdx
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x14000639c
xor r9d, r9d
lea r8, [rsp + 0x60]
xor edx, edx
mov ecx, 0x30
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
xor r8d, r8d
mov ecx, dword [rsp + 0x64]
mov edx, dword [rsp + 0x60]
mov qword [rsp + 0x58], r8
mov rax, qword [rbx]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x50], rax
mov eax, dword [rsp + 0x6c]
mov qword [rsp + 0x40], r9
mov r9d, 0x80000000
sub eax, ecx
mov dword [rsp + 0x28], ecx
mov ecx, pe_nt_image_headers64
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x20], edx
sub eax, edx
mov rdx, rsi
mov dword [rsp + 0x30], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14003d3f0], rax
xor ecx, ecx
call fcn.140003b64
test eax, eax
jne 0x14000638b
call fcn.140004be7
cmp dword [rbp + 0x20], 0
jne 0x14000636d
mov rcx, qword [0x14003d3f0]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.RichEd20
call fcn.14000952d
test rax, rax
jne 0x1400062e9
lea rcx, str.RichEd32
call fcn.14000952d
lea rsi, str.RichEdit20W
xor ecx, ecx
mov rdi, qword [sym.imp.USER32.dll_GetClassInfoW]
lea r8, [0x14003d380]
mov rdx, rsi
call rdi
test eax, eax
jne 0x14000632f
xor ecx, ecx
lea r8, [0x14003d380]
lea rdx, str.RichEdit
call rdi
mov qword [0x14003d3c0], rsi
lea rcx, [0x14003d380]
call qword [sym.imp.USER32.dll_RegisterClassW]
mov eax, dword [0x140035318]
lea r9, [0x14000552c]
xor r8d, r8d
lea edx, [rax + 0x69]
xor eax, eax
mov qword [rsp + 0x20], rax
movzx edx, dx
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov ecx, 5
mov ebx, eax
call fcn.140003b64
mov ecx, 1
call fcn.140004aa0
jmp 0x14000639e
xor ecx, ecx
call fcn.140004cd9
test eax, eax
je 0x140006392
cmp dword [0x140035310], 0
jne 0x14000638b
mov ecx, 2
call fcn.140003b64
mov ebx, 2
jmp 0x14000639e
mov ecx, 1
call fcn.140003b64
xor ebx, ebx
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret