Function at 0x14002b4e0
Capabilities:
Identify system language via api

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x278
mov qword [rsp + 0x48], r8
mov r13, rdx
mov rdi, rcx
mov rax, qword [0x1400d7618]
xor rax, rsp
mov qword [rsp + 0x270], rax
movzx r14d, word [rcx + 0x28]
movzx r15d, word [rcx + 0x2a]
mov rsi, qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
call rsi
mov ebp, eax
movzx ebx, word [rdi + 0x2a]
movzx r12d, word [rdi + 0x28]
call rsi
mov word [rsp + 0x46], ax
lea rsi, [rsp + 0x60]
mov r8d, 0x208
mov rcx, rsi
mov dl, 0xaa
call fcn.140086a50
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r14d
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rsi
call fcn.14002b780
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x54], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x54]
mov rdx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002b5b6
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14002b5b6
mov r8d, dword [rsp + 0x54]
test r8d, r8d
jne 0x14002b740
lea rsi, [rsp + 0x60]
mov r8d, 0x208
mov rcx, rsi
mov dl, 0xaa
call fcn.140086a50
movzx eax, bp
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rsi
call fcn.14002b780
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x54], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x54]
mov rdx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002b638
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14002b638
mov r8d, dword [rsp + 0x54]
test r8d, r8d
jne 0x14002b740
lea rsi, [rsp + 0x60]
mov r8d, 0x208
mov rcx, rsi
mov dl, 0xaa
call fcn.140086a50
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x20], r12d
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rsi
call fcn.14002b780
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x54], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x54]
mov rdx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002b6bc
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14002b6bc
mov r8d, dword [rsp + 0x54]
test r8d, r8d
jne 0x14002b740
lea rsi, [rsp + 0x60]
mov r8d, 0x208
mov rcx, rsi
mov dl, 0xaa
call fcn.140086a50
movzx eax, word [rsp + 0x46]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, rsi
call fcn.14002b780
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x54], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x58]
lea r9, [rsp + 0x54]
mov rdx, rsi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x14002b777
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x14002b777
mov r8d, dword [rsp + 0x54]
test r8d, r8d
je 0x14002b777
add r8d, 0xffffffff
mov rcx, qword [rsp + 0x48]
call fcn.14001ff56
mov sil, 1
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.140083c20
mov eax, esi
add rsp, 0x278
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
jmp 0x14002b751