Function at 0x140258770
Capabilities:
Identify system language via api

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x278
mov qword [rsp + 0x48], r8
mov rbx, rdx
mov rdi, rcx
mov rax, qword [0x14031d040]
xor rax, rsp
mov qword [rsp + 0x270], rax
movzx r12d, word [rcx + 0x28]
movzx r13d, word [rcx + 0x2a]
mov r15, qword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
call r15
mov r14d, eax
movzx esi, word [rdi + 0x2a]
movzx ebp, word [rdi + 0x28]
call r15
mov word [rsp + 0x46], ax
lea r15, [rsp + 0x60]
mov r8d, 0x208
mov rcx, r15
mov dl, 0xaa
call fcn.140235e90
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, r15
call fcn.140071c90
lea r12, [rsp + 0x58]
mov qword [r12], 0
lea r13, [rsp + 0x54]
mov dword [r13], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, r15
mov r8, r12
mov r9, r13
call sub.VERSION.dll_VerQueryValueW
test eax, eax
sete al
mov rdx, qword [r12]
test rdx, rdx
sete cl
mov r8d, dword [r13]
test r8d, r8d
sete r9b
or r9b, cl
or r9b, al
je 0x140258a16
lea r15, [rsp + 0x60]
mov r8d, 0x208
mov rcx, r15
mov dl, 0xaa
call fcn.140235e90
movzx eax, r14w
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], eax
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, r15
call fcn.140071c90
lea r14, [rsp + 0x58]
mov qword [r14], 0
lea r12, [rsp + 0x54]
mov dword [r12], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, r15
mov r8, r14
mov r9, r12
call sub.VERSION.dll_VerQueryValueW
test eax, eax
sete al
mov rdx, qword [r14]
test rdx, rdx
sete cl
mov r8d, dword [r12]
test r8d, r8d
sete r9b
or r9b, cl
or r9b, al
cmp r9b, 1
jne 0x140258a16
lea r14, [rsp + 0x60]
mov r8d, 0x208
mov rcx, r14
mov dl, 0xaa
call fcn.140235e90
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], ebp
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, r14
call fcn.140071c90
lea r15, [rsp + 0x58]
mov qword [r15], 0
lea r12, [rsp + 0x54]
mov dword [r12], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, r14
mov r8, r15
mov r9, r12
call sub.VERSION.dll_VerQueryValueW
test eax, eax
sete al
mov rdx, qword [r15]
test rdx, rdx
sete cl
mov r8d, dword [r12]
test r8d, r8d
sete r9b
or r9b, cl
or r9b, al
cmp r9b, 1
jne 0x140258a16
lea r14, [rsp + 0x60]
mov r8d, 0x208
mov rcx, r14
mov dl, 0xaa
call fcn.140235e90
movzx eax, word [rsp + 0x46]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0x4e4
lea r9, str.StringFileInfo_04x_04x_ls
mov edx, 0x104
mov r8d, 0x104
mov rcx, r14
call fcn.140071c90
lea rbx, [rsp + 0x58]
mov qword [rbx], 0
lea r15, [rsp + 0x54]
mov dword [r15], 0xaaaaaaaa
mov rcx, qword [rdi + 0x20]
mov rdx, r14
mov r8, rbx
mov r9, r15
call sub.VERSION.dll_VerQueryValueW
test eax, eax
sete al
mov rdx, qword [rbx]
test rdx, rdx
sete cl
mov r8d, dword [r15]
test r8d, r8d
sete r9b
or r9b, cl
or r9b, al
cmp r9b, 1
jne 0x140258a16
xor esi, esi
jmp 0x140258a26
dec r8d
mov rcx, qword [rsp + 0x48]
call fcn.1401b68c0
mov sil, 1
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.1401f08b0
mov eax, esi
add rsp, 0x278
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret