Function at 0x1400ca724
Capabilities:
Identify system language via api

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x140379a08]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov bl, r8b
mov r12, rdx
mov r15, rcx
mov byte [rsp + 0x30], bl
lea rcx, [rsp + 0x60]
call fcn.1400c97ec
nop
lea rax, [0x1402cf9c8]
mov qword [rsp + 0x60], rax
mov dl, bl
lea rcx, [rsp + 0x60]
call fcn.1400cacac
nop
xor r14d, r14d
mov esi, r14d
mov edx, 0x4f56
lea rcx, [0x140000000]
call qword [sym.imp.USER32.dll_LoadMenuW]
nop dword [rax + rax]
nop
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x1400ca7cc
mov rcx, qword [rbp + 0xe8]
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, Ordinal_206
call fcn.140188698
nop
jmp 0x1400ca9b5
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
nop dword [rax + rax]
nop
mov rbx, rax
test rax, rax
jne 0x1400ca80c
mov rcx, qword [rbp + 0xe8]
mov ebx, 0x80004005
mov r9d, ebx
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, Ordinal_210
call fcn.14001eb0c
nop
jmp 0x1400ca9b7
mov rcx, qword [r15 + 0x28]
call qword [0x14039e7b0]
nop dword [rax + rax]
nop
mov rdi, rax
mov rcx, rax
call qword [0x14039e708]
nop dword [rax + rax]
nop
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, r12
mov rdx, rdi
mov rcx, rbx
call fcn.14026798c
nop
test eax, eax
setns r13b
mov r14d, 0x2182
mov eax, dword [0x14037a780]
cmp eax, 0xffffffff
jne 0x1400ca8c0
xor eax, eax
mov r14d, eax
call qword [sym.imp.api_ms_win_core_localization_obsolete_l1_2_0.dll_GetUserDefaultUILanguage]
nop dword [rax + rax]
nop
mov word [0x14037b628], ax
test ax, ax
je 0x1400ca8a4
movzx ecx, ax
call fcn.14006c2c0
nop
mov r14d, eax
xor eax, eax
mov ecx, eax
test r14d, r14d
setne cl
xchg dword [0x14037a780], ecx
mov eax, dword [0x14037a780]
mov r14d, 0x2182
mov ecx, 0xa182
cmp eax, 1
cmove r14d, ecx
xor r9d, r9d
mov edx, 0x4f6
lea r8d, [r9 + 1]
mov rcx, rdi
call qword [0x14039e600]
nop dword [rax + rax]
nop
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9d, dword [r12 + 4]
mov r8d, dword [r12]
mov edx, r14d
mov rcx, rbx
call qword [sym.imp.USER32.dll_TrackPopupMenuEx]
nop dword [rax + rax]
nop
mov r14d, eax
mov rcx, rdi
call qword [0x14039e708]
nop dword [rax + rax]
nop
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4f6
mov rcx, rdi
call qword [0x14039e600]
nop dword [rax + rax]
nop
sub r14d, 0x4f57
je 0x1400ca95c
cmp r14d, 1
jne 0x1400ca98a
lea esi, [r14 + 1]
mov rcx, r15
call fcn.1400c9e74
nop
jmp 0x1400ca98a
mov esi, 1
mov rcx, r15
call fcn.1400cabb0
nop
test eax, eax
jns 0x1400ca98a
mov rcx, qword [rbp + 0xe8]
mov r9d, eax
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, 0xec
call fcn.14009d7ec
nop
test r13b, r13b
je 0x1400ca99b
mov rdx, rdi
mov rcx, rbx
call fcn.140268174
nop
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.1400cadc8
nop
lea rcx, [rsp + 0x40]
call fcn.1401c2cf0
nop
xor eax, eax
mov ebx, eax
lea rcx, [rsp + 0x38]
call fcn.1401d5914
nop
lea rcx, [rsp + 0x60]
call fcn.1400c99e4
nop
mov eax, ebx
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a2260
nop
mov rbx, qword [rsp + 0x208]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret