Function at 0x14002d140
Capabilities:
Identify system language via api

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x268
mov r12, r8
mov r15, rdx
mov rdi, rcx
mov rax, qword [0x140117028]
xor rax, rsp
mov qword [rsp + 0x260], rax
movzx esi, word [rcx + 0x28]
movzx r13d, word [rcx + 0x2a]
mov rbp, qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
call rbp
mov ebx, eax
movzx r14d, word [rdi + 0x2a]
movzx eax, word [rdi + 0x28]
mov dword [rsp + 0x40], eax
call rbp
mov word [rsp + 0x3e], ax
lea rbp, [rsp + 0x50]
mov r8d, 0x208
mov rcx, rbp
mov dl, 0xaa
call fcn.1400840e0
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], esi
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rbp
call fcn.14002d500
lea r8, [rsp + 0x48]
mov qword [r8], 0
lea r9, [rsp + 0x44]
mov dword [r9], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, rbp
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002d358
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x14002d358
mov esi, dword [rsp + 0x44]
test esi, esi
je 0x14002d358
dec esi
cmp byte [r12 + 0x17], 0
js 0x14002d302
mov rdi, r12
cmp esi, 0xa
ja 0x14002d281
lea r8, [rsi + rsi]
mov rcx, rdi
mov rdx, rbp
call fcn.140083a30
cmp byte [r12 + 0x17], 0
js 0x14002d2f8
mov byte [r12 + 0x17], sil
lea rax, [rdi + rsi*2]
mov word [rax], 0
mov sil, 1
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.140081fb0
mov eax, esi
add rsp, 0x268
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r15d, 0xa
mov r14, r12
lea rax, [r15 + r15]
cmp rsi, rax
cmova rax, rsi
mov edi, 0xb
cmp rax, 0xb
jb 0x14002d2ab
add rax, 8
and rax, 0xfffffffffffffff8
mov rdi, rax
lea rcx, [rdi + rdi]
call fcn.140080c6c
mov rbx, rax
lea r8, [rsi + rsi]
mov rcx, rax
mov rdx, rbp
call fcn.140083a30
cmp r15, 0xa
jne 0x14002d4e2
lea rax, [rbx + rsi*2]
mov qword [r12], rbx
movabs rcx, 0x7fffffffffffffef
add rcx, 0x11
or rdi, rcx
mov qword [r12 + 0x10], rdi
mov qword [r12 + 8], rsi
jmp 0x14002d253
mov qword [r12 + 8], rsi
jmp 0x14002d24f
movabs rdi, 0x7fffffffffffffef
lea rax, [rdi + 0x10]
and rax, qword [r12 + 0x10]
lea r15, [rax - 1]
cmp r15, rsi
jb 0x14002d327
mov rdi, qword [r12]
jmp 0x14002d22f
mov rcx, rsi
sub rcx, r15
mov rdx, rdi
sub rdx, rax
cmp rdx, rcx
jb 0x14002d4ef
mov r14, qword [r12]
movabs rax, 0x3fffffffffffffe6
cmp r15, rax
jbe 0x14002d28a
jmp 0x14002d2ab
lea rbp, [rsp + 0x50]
mov r8d, 0x208
mov rcx, rbp
mov dl, 0xaa
call fcn.1400840e0
movzx eax, bx
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rbp
call fcn.14002d500
lea r8, [rsp + 0x48]
mov qword [r8], 0
lea r9, [rsp + 0x44]
mov dword [r9], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, rbp
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002d3d6
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x14002d3d6
mov esi, dword [rsp + 0x44]
test esi, esi
jne 0x14002d219
lea rbx, [rsp + 0x50]
mov r8d, 0x208
mov rcx, rbx
mov dl, 0xaa
call fcn.1400840e0
mov qword [rsp + 0x30], r15
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rbx
call fcn.14002d500
lea r8, [rsp + 0x48]
mov qword [r8], 0
lea r9, [rsp + 0x44]
mov dword [r9], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, rbx
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002d458
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x14002d458
mov esi, dword [rsp + 0x44]
test esi, esi
jne 0x14002d219
lea rbx, [rsp + 0x50]
mov r8d, 0x208
mov rcx, rbx
mov dl, 0xaa
call fcn.1400840e0
movzx eax, word [rsp + 0x3e]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rbx
call fcn.14002d500
lea r8, [rsp + 0x48]
mov qword [r8], 0
lea r9, [rsp + 0x44]
mov dword [r9], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, rbx
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002d4db
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x14002d4db
mov esi, dword [rsp + 0x44]
test esi, esi
jne 0x14002d219
xor esi, esi
jmp 0x14002d25b
mov rcx, r14
call fcn.140080ca8
jmp 0x14002d2d0
call fcn.1400993b0
int3