Function at 0x1001af45
Capabilities:
Identify system language via api

Disassembly:
mov eax, 0x1006410f
call fcn.100630d8
sub esp, 0x58
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], edi
je 0x1001af81
push ecx
push ecx
push dword [ebp + 0x20]
mov ecx, dword [ebp + 0x1c]
call fcn.1001e1d8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x20], 0x7009
cmp dword [ebp - 0x20], 0x72ec
jle 0x1001affa
push 0
push 0x178f
call dword [sym.imp.GDI32.dll_SelectObject]
xor edi, edi
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x1c], 0x3699
mov dword [ebp - 0x18], eax
xor eax, edi
lea ecx, [ebp - 0x48]
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001afc5
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.100050bb
mov eax, dword [ebp - 0x18]
add eax, ebx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jne 0x1001afae
inc ebx
cmp ebx, 0x7865
jl 0x1001afa2
inc edi
cmp edi, 0x26a9
jl 0x1001afa0
mov edi, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0x6e28
jge 0x1001b00e
push str.agwzpwoi_xnyln_oru_jyrxh_zdd_numjnuall_seued_vprjmy_jhviepy_fcrxknmc
call fcn.1004c653
pop ecx
mov eax, dword [ebp + 0x10]
or dword [ebp - 4], 0xffffffff
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar ecx, 2
sar eax, 2
cmp ecx, eax
jbe 0x1001b062
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x18]
mov dword [edx], ecx
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 2
mov dword [ebx], eax
cmp eax, dword [edx]
jge 0x1001b132
and dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
call fcn.1001dbac
mov ecx, dword [ebp + 0xc]
inc dword [ebx]
mov eax, dword [ebx]
cmp eax, dword [ecx]
jl 0x1001b043
jmp 0x1001b132
mov dword [ebp - 0x28], 0x463b
cmp dword [ebp - 0x28], 0x4754
jle 0x1001b0e3
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x20], 0x29e9
mov dword [ebp - 0x18], eax
xor ebx, ebx
and eax, ebx
lea ecx, [ebp - 0x60]
xor eax, edi
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b0a0
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push 0
push 1
lea ecx, [ebp - 0x60]
call fcn.100050bb
mov eax, dword [ebp - 0x18]
inc ebx
cmp ebx, 0x288e
jl 0x1001b087
dec eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
jne 0x1001b085
mov ebx, dword [ebp - 0x1c]
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x2a77
jl 0x1001b079
inc edi
cmp edi, 0xd26
jl 0x1001b074
mov edi, dword [ebp - 0x24]
mov eax, dword [edi + 4]
sub eax, dword [edi]
mov ebx, dword [ebp + 0xc]
sar eax, 2
cmp dword [ebp - 0x28], 0x440e
mov dword [ebx], eax
jge 0x1001b104
push str.iqi_tlcpit_jlpygy_qasts_vlgk_nsgmcuyv_oxlihdjvh_ruwtiunx_kaj_kdoukw_qqjhwwgf
call fcn.1004c653
pop ecx
mov ecx, dword [ebp + 0x10]
or dword [ebp - 4], 0xffffffff
mov edi, dword [ebp + 0x18]
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 2
mov dword [edi], eax
jmp 0x1001b12e
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x30]
push eax
call fcn.1001dbac
inc dword [edi]
mov eax, dword [edi]
mov ecx, dword [ebp + 0x10]
cmp eax, dword [ebx]
jl 0x1001b11a
mov dword [ebp - 0x28], 0x50b3
cmp dword [ebp - 0x28], 0x531b
jle 0x1001b172
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor edi, edi
xor ebx, ebx
mov eax, edi
mov ecx, 0x10081078
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.10004aca
inc ebx
cmp ebx, 0x14c2
jl 0x1001b14c
inc edi
cmp edi, 0x3560
jl 0x1001b14a
mov dword [ebp - 4], 4
cmp dword [ebp - 0x28], 0x509a
jge 0x1001af70
mov edx, str.lexmwtai_yecpexe_uphul
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1001af70