Function at 0x100215c0
Capabilities:
Identify system language via api

Disassembly:
push 0xffffffffffffffff
push 0x10074458
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1008e418]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov ebx, 1
test byte [0x10093840], bl
jne 0x10021612
or dword [0x10093840], ebx
push 0x100937ec
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1007a7e0
call fcn.10055cf8
add esp, 4
push 0x100937ec
mov dword [esp + 0x1c], 0x100937ec
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ebp, ebp
mov dword [esp + 0x24], ebp
mov ax, word [0x10092868]
cmp ax, bp
jne 0x10021657
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov ecx, 0x809
mov word [0x10092868], ax
cmp ax, cx
jne 0x10021657
mov eax, 0x409
mov word [0x10092868], ax
mov edi, dword [esp + 0x2c]
mov word [edi + 8], ax
mov eax, dword [0x10092878]
cmp eax, ebp
jne 0x1002167c
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x10092878], eax
cmp eax, ebp
je 0x10021690
push str.IsUserAnAdmin
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebp
je 0x10021690
call eax
jmp 0x10021692
mov eax, ebx
mov dword [edi], eax
call fcn.100205a0
mov dword [edi + 4], eax
mov dword [edi + 0x20], ebp
cmp dword [edi + 0x18], ebp
jne 0x10021849
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x100216c4
mov dword [eax], vtable.CWindowsInfo.0
mov dword [eax + 4], ebp
mov dword [eax + 8], ebp
jmp 0x100216c6
xor eax, eax
lea esi, [edi + 0x14]
mov ebx, 0x1009287c
mov dword [0x1009287c], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
or edi, 0xffffffff
cmp eax, ebp
je 0x100216f7
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CInternetExplorer.0
jmp 0x100216f9
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x10021722
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CWSScriptInfo.0
jmp 0x10021724
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x1002174d
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CMediaplayerInfo.0
jmp 0x1002174f
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x10021778
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CDirectXInfo.0
jmp 0x1002177a
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x100217a3
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.COutLookExpressInfo.0
jmp 0x100217a5
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0xc
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x100217ce
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CDataAccessInfo.0
jmp 0x100217d0
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0x18
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x10021802
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CDotNetFrameworkInfo.0
mov dword [eax + 0xc], ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
jmp 0x10021804
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
push 0x18
call fcn.10056628
add esp, 4
cmp eax, ebp
je 0x10021836
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax], vtable.CXmlCoreInfo.0
mov dword [eax + 0xc], ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
jmp 0x10021838
xor eax, eax
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.10021c20
mov edi, dword [esp + 0x2c]
xor esi, esi
cmp dword [edi + 0x18], ebp
jle 0x1002186c
cmp esi, ebp
jl 0x100218a8
cmp esi, dword [edi + 0x18]
jge 0x100218a8
mov edx, dword [edi + 0x14]
mov ecx, dword [edx + esi*4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
inc esi
cmp esi, dword [edi + 0x18]
jl 0x10021850
mov eax, dword [0x1009287c]
cmp eax, ebp
je 0x10021887
mov eax, dword [eax + 4]
mov dword [edi + 0xc], eax
mov ecx, dword [0x1009287c]
mov edx, dword [ecx + 8]
mov dword [edi + 0x10], edx
push 0x100937ec
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4
push ebp
push ebp
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]