Function at 0x1800056c0
Capabilities:
Identify system language via api
Manipulate console buffer
Move file

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x80
mov rbx, rcx
lea r8, [0x1800f7564]
mov r9, rdx
lea rcx, [rsp + 0x58]
xor edi, edi
lea edx, [rdi + 0x20]
call fcn.1800011b0
cmp dword [0x1800e0678], 0x1fc1fbe
jne 0x18000587c
xor ecx, ecx
call qword [sym.imp.USER32.dll_CopyIcon]
call qword [sym.imp.USER32.dll_CloseClipboard]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapWalk]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadStringW]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov dword [rsp + 0x40], edi
xor r9d, r9d
mov qword [rsp + 0x38], rdi
xor r8d, r8d
mov dword [rsp + 0x30], edi
xor edx, edx
mov dword [rsp + 0x28], edi
xor ecx, ecx
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_DrawIconEx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateIconIndirect]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxIndirectW]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetNLSVersion]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitCommEvent]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThreadpoolWork]
call qword [sym.imp.USER32.dll_CreateMenu]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MoveFileW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetRawInputData]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RemoveDllDirectory]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AddAtomW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PowerCreateRequest]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSectionWhenCallbackReturns]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [0x1800f7570]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStringTypeA]
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumClipboardFormats]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MapVirtualKeyExW]
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_QueryIdleProcessorCycleTime]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
xorps xmm0, xmm0
lea rax, [rsp + 0x58]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov r8, 0xffffffffffffffff
mov qword [rbx + 0x18], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x180005896
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800156f0
mov rax, rbx
mov rbx, qword [rsp + 0x90]
add rsp, 0x80
pop rdi
ret