Function at 0x140003c90
Capabilities:
Identify system language via api

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4208]
mov eax, 0x42e0
call fcn.14005e9b0
sub rsp, rax
mov rax, qword [0x140083010]
xor rax, rsp
mov qword [rbp + 0x41d0], rax
xor r15d, r15d
mov rbx, r8
mov rsi, rcx
mov r14b, r15b
lea r12d, [r15 + 1]
test r8, r8
je 0x140003d0d
lea rdx, [0x140067538]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140003d08
lea rdx, str._Embedding
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x140003d0d
mov bl, r12b
jmp 0x140003d10
mov bl, r15b
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov r13d, 2
test eax, eax
js 0x140003f26
test bl, bl
je 0x140003d37
call fcn.140059ef8
test eax, eax
js 0x14000400f
mov eax, dword [0x140084df0]
cmp eax, r13d
je 0x140003dab
xor eax, eax
lock cmpxchg dword [0x140084df0], r12d
je 0x140003d65
cmp eax, r13d
je 0x140003dab
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], r15
call fcn.140004860
jmp 0x140003d42
xorps xmm0, xmm0
mov qword [rbp - 0x80], r15
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x60], xmm0
lea rax, [0x1400682c0]
movdqa xmmword [rsp + 0x70], xmm1
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x78], rax
mov dword [rbp - 0x70], r15d
mov dword [rbp - 0x6c], r13d
mov dword [rbp - 0x68], 0xfffffffe
call fcn.140020a10
mov eax, r12d
lock cmpxchg dword [0x140084df0], r13d
mov dword [0x140084d74], r12d
mov r14b, r12b
mov qword [0x140084d60], rsi
test bl, bl
je 0x140003dca
call fcn.140003920
jmp 0x140003f26
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ebx, ax
lea r9, [0x140067518]
or r8, 0xffffffffffffffff
mov dword [rsp + 0x20], ebx
mov edx, 0x104
lea rcx, [rbp - 0x60]
mov edi, ebx
call fcn.1400031f8
mov eax, 0x409
cmp bx, ax
je 0x140003e16
or r9, 0xffffffffffffffff
lea r8, str._1033
mov edx, 0x104
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140003a28
mov rbx, rax
test rax, rax
je 0x140003f0d
mov esi, 0x1001
lea r8, [rbp + 0x1b0]
mov r9d, esi
mov edx, 0x8062
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9d, esi
lea r8, [rbp + 0x21c0]
mov edx, 0x8063
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadStringW]
movzx ecx, dil
mov edx, r15d
cmp ecx, 0x59
ja 0x140003eaf
je 0x140003e9f
sub ecx, r12d
je 0x140003ee1
sub ecx, 0xc
je 0x140003ee1
sub ecx, 0x13
je 0x140003ee1
sub ecx, 9
je 0x140003ee1
sub ecx, 0x14
je 0x140003ee1
mov esi, 3
cmp ecx, 9
jne 0x140003ee9
cmp edi, 0x846
sete dl
jmp 0x140003ee9
cmp edi, 0x859
mov esi, 3
sete dl
jmp 0x140003ee9
sub ecx, 0x5a
je 0x140003ee1
mov esi, 3
sub ecx, 5
je 0x140003ed6
sub ecx, r12d
je 0x140003ece
sub ecx, esi
je 0x140003ee6
cmp ecx, r13d
je 0x140003ee6
jmp 0x140003ee9
cmp edi, 0x860
jmp 0x140003edc
cmp edi, 0x85f
setne dl
jmp 0x140003ee9
mov esi, 3
mov edx, r12d
neg edx
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x21c0]
sbb r9d, r9d
xor ecx, ecx
and r9d, 0x180000
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140003f2b
xor r9d, r9d
lea r8, [0x140067588]
lea rdx, str.This_program_can_only_run_from_within_another_program.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov esi, 3
mov rcx, qword [0x140084d30]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rbx, qword [0x140084d38]
test rbx, rbx
je 0x140003f5e
mov rcx, qword [0x140086c20]
test rcx, rcx
je 0x140003f55
call fcn.140059de4
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140084d38], r15
call fcn.14000224c
mov rdi, rax
test rax, rax
je 0x140003fb4
mov rdx, qword [rax]
mov rax, qword [rdx]
mov qword [rdx], rdx
mov rdx, qword [rdi]
mov qword [rdx + 8], rdx
mov qword [rdi + 8], r15
mov rcx, qword [rdi]
cmp rax, rcx
je 0x140003fa5
mov rbx, qword [rax]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rdi]
mov rax, rbx
cmp rbx, rcx
jne 0x140003f8e
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r14b, r14b
je 0x14000400f
mov eax, dword [0x140084df0]
test eax, eax
je 0x140004009
mov eax, r13d
lock cmpxchg dword [0x140084df0], esi
je 0x140003fe5
test eax, eax
je 0x140004009
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], r15
call fcn.140004860
jmp 0x140003fc3
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x48], r15b
mov qword [rsp + 0x50], r15
call fcn.140020bd0
mov eax, esi
lock cmpxchg dword [0x140084df0], r15d
call qword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov rcx, qword [rbp + 0x41d0]
xor rcx, rsp
call fcn.14005ccf0
lea r11, [rsp + 0x42e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret