Function at 0x1400cafb4
Capabilities:
Identify system language via api

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x140387a48]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov bl, r8b
mov r12, rdx
mov r15, rcx
mov byte [rsp + 0x30], bl
lea rcx, [rsp + 0x60]
call fcn.1400ca07c
nop
lea rax, [0x1402dc718]
mov qword [rsp + 0x60], rax
mov dl, bl
lea rcx, [rsp + 0x60]
call fcn.1400cb53c
nop
xor r14d, r14d
mov esi, r14d
mov edx, 0x4f56
lea rcx, [0x140000000]
call qword [sym.imp.USER32.dll_LoadMenuW]
nop dword [rax + rax]
nop
mov qword [rsp + 0x38], rax
test rax, rax
jne 0x1400cb05c
mov rcx, qword [rbp + 0xe8]
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, Ordinal_206
call fcn.140195678
nop
jmp 0x1400cb245
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetSubMenu]
nop dword [rax + rax]
nop
mov rbx, rax
test rax, rax
jne 0x1400cb09c
mov rcx, qword [rbp + 0xe8]
mov ebx, 0x80004005
mov r9d, ebx
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, Ordinal_210
call fcn.14001e09c
nop
jmp 0x1400cb247
mov rcx, qword [r15 + 0x28]
call qword [0x1403ad6f0]
nop dword [rax + rax]
nop
mov rdi, rax
mov rcx, rax
call qword [0x1403ad680]
nop dword [rax + rax]
nop
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, r12
mov rdx, rdi
mov rcx, rbx
call fcn.14027439c
nop
test eax, eax
setns r13b
mov r14d, 0x2182
mov eax, dword [0x1403887c0]
cmp eax, 0xffffffff
jne 0x1400cb150
xor eax, eax
mov r14d, eax
call qword [sym.imp.api_ms_win_core_localization_obsolete_l1_2_0.dll_GetUserDefaultUILanguage]
nop dword [rax + rax]
nop
mov word [0x140389678], ax
test ax, ax
je 0x1400cb134
movzx ecx, ax
call fcn.14006b5d0
nop
mov r14d, eax
xor eax, eax
mov ecx, eax
test r14d, r14d
setne cl
xchg dword [0x1403887c0], ecx
mov eax, dword [0x1403887c0]
mov r14d, 0x2182
mov ecx, 0xa182
cmp eax, 1
cmove r14d, ecx
xor r9d, r9d
mov edx, 0x4f6
lea r8d, [r9 + 1]
mov rcx, rdi
call qword [0x1403ad7b0]
nop dword [rax + rax]
nop
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9d, dword [r12 + 4]
mov r8d, dword [r12]
mov edx, r14d
mov rcx, rbx
call qword [sym.imp.USER32.dll_TrackPopupMenuEx]
nop dword [rax + rax]
nop
mov r14d, eax
mov rcx, rdi
call qword [0x1403ad680]
nop dword [rax + rax]
nop
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4f6
mov rcx, rdi
call qword [0x1403ad7b0]
nop dword [rax + rax]
nop
sub r14d, 0x4f57
je 0x1400cb1ec
cmp r14d, 1
jne 0x1400cb21a
lea esi, [r14 + 1]
mov rcx, r15
call fcn.1400ca704
nop
jmp 0x1400cb21a
mov esi, 1
mov rcx, r15
call fcn.1400cb440
nop
test eax, eax
jns 0x1400cb21a
mov rcx, qword [rbp + 0xe8]
mov r9d, eax
lea r8, str.pcshell_shellexplorermeetnowtrayitem.cpp
mov edx, 0xec
call fcn.14009cb2c
nop
test r13b, r13b
je 0x1400cb22b
mov rdx, rdi
mov rcx, rbx
call fcn.140274b84
nop
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.1400cb658
nop
lea rcx, [rsp + 0x40]
call fcn.1401cfce0
nop
xor eax, eax
mov ebx, eax
lea rcx, [rsp + 0x38]
call fcn.1401e2934
nop
lea rcx, [rsp + 0x60]
call fcn.1400ca274
nop
mov eax, ebx
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a15a0
nop
mov rbx, qword [rsp + 0x208]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret