Function at 0x140006d78
Capabilities:
Check if file exists
Get file attributes
Identify system language via api

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x80
mov rax, qword [0x14000d188]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov rdi, qword [0x140078d50]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx edx, ax
lea rcx, [0x1400da000]
call fcn.140007ab4
call fcn.140006c6c
mov eax, dword [0x140078d4c]
lea rbp, [0x1400ce000]
and eax, 0x20
mov dword [0x140078e3c], 0x10000
mov rcx, rbp
mov dword [0x140078e20], eax
call fcn.140007ac8
xor esi, esi
test eax, eax
jne 0x140006ea4
cmp dword [rdi + 0x68], esi
je 0x140006ea4
mov rcx, qword [0x140078d84]
lea rbx, [0x140068c80]
movsxd rax, dword [rdi + 0x6c]
mov r9, rbx
mov dword [rsp + 0x20], esi
lea r8, [rcx + rax*2]
movsxd rax, dword [rdi + 0x68]
lea rdx, [rcx + rax*2]
movsxd rcx, dword [rdi + 0x64]
call fcn.140007f4c
movzx eax, word [0x140068c80]
test ax, ax
je 0x140006ea4
lea edx, [rsi + 0x22]
cmp ax, dx
jne 0x140006e4e
lea rbx, [0x140068c82]
mov rcx, rbx
call fcn.140007a84
mov word [rax], si
mov rcx, rbx
call sub.KERNEL32.dll_lstrlenW
movsxd rcx, eax
add rcx, 0xfffffffffffffffc
lea rcx, [rbx + rcx*2]
cmp rcx, rbx
jbe 0x140006e91
lea rdx, str..exe
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x140006e91
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140006e89
test al, 0x10
jne 0x140006e91
mov rcx, rbx
call fcn.140008334
mov rcx, rbx
call fcn.1400079ac
mov rdx, rax
mov rcx, rbp
call fcn.140008170
mov rcx, rbp
call fcn.140007ac8
test eax, eax
jne 0x140006ebe
mov edx, dword [rdi + 0x138]
mov rcx, rbp
call fcn.1400072a4
mov rcx, qword [0x140070d18]
xor r9d, r9d
mov dword [rsp + 0x28], 0x8040
mov dword [rsp + 0x20], esi
lea ebp, [r9 + 1]
mov r8d, ebp
lea edx, [rbp + 0x66]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [0x140070ce0], rax
lea rbx, [0x140070c80]
cmp dword [rdi + 0x70], 0xffffffff
je 0x140006fba
lea rcx, section..text
mov qword [0x140070ca0], rax
mov qword [0x140070c88], rcx
lea rdi, [0x14000aa50]
mov rcx, qword [0x140070d18]
mov qword [0x140070c98], rcx
mov rcx, rbx
mov qword [0x140070cc0], rdi
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x140006f42
xor eax, eax
jmp 0x1400070a5
xor edx, edx
lea r8, [rsp + 0x60]
xor r9d, r9d
lea ecx, [rdx + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov r8d, dword [rsp + 0x60]
mov rdx, rdi
mov r10d, dword [rsp + 0x64]
mov rax, qword [0x140070d18]
mov r9d, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x68]
sub r9d, r10d
mov qword [rsp + 0x58], rsi
sub ecx, r8d
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], r9d
mov r9d, 0x80000000
mov dword [rsp + 0x30], ecx
mov ecx, 0x80
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r8d
xor r8d, r8d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14004ee58], rax
xor ecx, ecx
call fcn.140001624
mov edi, 2
test eax, eax
jne 0x1400070a3
call fcn.140006c6c
cmp dword [0x140078e40], esi
jne 0x140007089
mov rcx, qword [0x14004ee58]
lea edx, [rdi + 3]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.RichEd20
call fcn.140007648
test rax, rax
jne 0x14000700c
lea rcx, str.RichEd32
call fcn.140007648
lea rdi, str.RichEdit20W
mov r8, rbx
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetClassInfoW]
test eax, eax
jne 0x140007047
mov r8, rbx
lea rdx, str.RichEdit
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetClassInfoW]
mov rcx, rbx
mov qword [0x140070cc0], rdi
call qword [sym.imp.USER32.dll_RegisterClassW]
movzx eax, word [0x140070cd8]
lea r9, [0x140006000]
mov rcx, qword [0x140070d18]
add ax, 0x69
movzx edx, ax
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.USER32.dll_DialogBoxParamW]
mov ecx, 5
mov rbx, rax
call fcn.140001624
mov ecx, ebp
call fcn.140004904
mov eax, ebx
jmp 0x1400070a5
xor ecx, ecx
call fcn.140006ae0
test eax, eax
je 0x1400070cb
cmp dword [0x140070d08], esi
jne 0x1400070a3
mov ecx, edi
call fcn.140001624
mov eax, edi
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1400098e0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
mov ecx, ebp
call fcn.140001624
jmp 0x140006f3b