Function at 0x1286c470
Capabilities:
Get file attributes
Identify system language via api

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x12a52ee0]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov r14, rcx
mov eax, dword [0x129ade28]
test eax, eax
je 0x1286c89d
mov rbx, qword [0x129abc80]
test rbx, rbx
jne 0x1286c4ee
lea rcx, [0x129b4df0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.LdrEnumerateLoadedModules
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x129abc80], rax
test rbx, rbx
je 0x1286c89d
xor r15d, r15d
mov qword [rsp + 0xb0], r15
xor eax, eax
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xe0], 7
mov qword [rsp + 0xd8], r15
mov word [rsp + 0xc8], r15w
lea ecx, [rax + 8]
call fcn.12958d80
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x20], rax
test rax, rax
je 0x1286c54d
lea rcx, [rsp + 0xe8]
mov qword [rax], rcx
jmp 0x1286c550
mov rax, r15
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0xe8]
call fcn.12828770
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r15
mov word [rsp + 0x128], r15w
lea r8, [rsp + 0xb0]
lea rdx, [0x128610b0]
xor ecx, ecx
call rbx
cmp qword [rsp + 0x118], 0
je 0x1286c890
mov ecx, 8
call fcn.12958d80
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x1286c5d7
lea rcx, [rsp + 0x28]
mov qword [rax], rcx
jmp 0x1286c5da
mov rax, r15
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x28]
call fcn.12828770
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x70], r15
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xa0], 7
mov qword [rsp + 0x98], r15
mov word [rsp + 0x88], r15w
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx r13d, ax
mov r12, qword [rsp + 0x110]
mov rsi, qword [r12]
mov rbp, qword [rsp + 0xe8]
nop word [rax + rax]
test rbp, rbp
je 0x1286c64a
cmp rbp, rbp
je 0x1286c64f
call fcn.1295850c
cmp rsi, r12
je 0x1286c788
test rbp, rbp
jne 0x1286c667
call fcn.1295850c
mov r11, r15
jmp 0x1286c66b
mov r11, qword [rbp]
cmp rsi, qword [r11 + 0x28]
jne 0x1286c676
call fcn.1295850c
cmp qword [rsi + 0x40], 8
jb 0x1286c683
mov rcx, qword [rsi + 0x28]
jmp 0x1286c687
lea rcx, [rsi + 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp qword [rsi + 0x40], 8
jb 0x1286c69a
mov rcx, qword [rsi + 0x28]
jmp 0x1286c69e
lea rcx, [rsi + 0x28]
xor r8d, r8d
mov rdx, qword [rsi + 0x38]
call fcn.12826020
cmp eax, 0x10
je 0x1286c6b8
cmp eax, 8
jne 0x1286c762
movzx r9d, r13w
mov r8d, 1
lea rdx, [0x129cf7b8]
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
test rax, rax
je 0x1286c762
xor edx, edx
mov rcx, rax
call fcn.12819900
mov rbx, rax
test rax, rax
je 0x1286c762
cmp rax, qword [rsi + 0x18]
je 0x1286c762
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x80]
call fcn.12803f90
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x80]
mov rdx, rbx
call fcn.1281cde0
cmp qword [rsp + 0x98], 0
je 0x1286c762
mov rdi, qword [rsp + 0x50]
lea r9, [rsp + 0x70]
mov r8, qword [rdi + 8]
mov rdx, rdi
lea rcx, [rsp + 0x28]
call fcn.12851d60
mov rbx, rax
mov edx, 1
lea rcx, [rsp + 0x28]
call fcn.1283f480
mov qword [rdi + 8], rbx
mov rcx, qword [rbx + 8]
mov qword [rcx], rbx
test rbp, rbp
jne 0x1286c771
call fcn.1295850c
mov r11, r15
jmp 0x1286c775
mov r11, qword [rbp]
cmp rsi, qword [r11 + 0x28]
jne 0x1286c780
call fcn.1295850c
mov rsi, qword [rsi]
jmp 0x1286c640
cmp qword [rsp + 0x58], 0
je 0x1286c82a
mov ecx, 0x38
call fcn.12958d80
mov qword [rsp + 0x20], rax
test rax, rax
je 0x1286c7b5
mov rcx, rax
call fcn.12837b20
mov r11, rax
jmp 0x1286c7b8
mov r11, r15
test r11, r11
je 0x1286c82a
lea rax, [rsp + 0x28]
cmp r11, rax
je 0x1286c827
mov rdx, qword [r11]
mov rax, qword [rsp + 0x28]
mov qword [r11], rax
mov qword [rsp + 0x28], rdx
mov r8, qword [r11]
cmp r8, rdx
je 0x1286c7eb
mov rax, qword [r8]
mov rcx, qword [rdx]
mov qword [r8], rcx
mov qword [rdx], rax
lea rdx, [r11 + 0x28]
lea rax, [rsp + 0x50]
cmp rdx, rax
je 0x1286c809
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x50]
mov qword [rdx], rax
mov qword [rsp + 0x50], rcx
lea rdx, [r11 + 0x30]
lea rax, [rsp + 0x58]
cmp rdx, rax
je 0x1286c827
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x58]
mov qword [rdx], rax
mov qword [rsp + 0x58], rcx
mov qword [r14], r11
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0xa0], 8
jb 0x1286c84f
mov rcx, qword [rsp + 0x88]
call fcn.12958250
mov qword [rsp + 0xa0], 7
mov qword [rsp + 0x98], r15
mov word [rsp + 0x88], r15w
lea rcx, [rsp + 0x28]
call fcn.1284b340
mov rcx, qword [rsp + 0x50]
call fcn.12958250
mov qword [rsp + 0x50], r15
mov rcx, qword [rsp + 0x28]
call fcn.12958250
nop
lea rcx, [rsp + 0xb0]
call fcn.1285cac0
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.12959850
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret