Function at 0x40906b
Capabilities:
Identify system language via api

Disassembly:
push 0x18
mov eax, 0x43a034
call fcn.00421920
mov dword [ebp - 0x1c], ecx
and dword [ebp - 4], 0
and dword [ebp - 0x20], 0
call fcn.0040bac9
push eax
lea ecx, [ebp - 0x14]
call main
xor esi, esi
inc esi
mov dword [ebp - 4], esi
call fcn.0040bac9
push eax
lea ecx, [ebp - 0x10]
call main
push 2
pop eax
mov byte [ebp - 4], al
call fcn.0040bac9
mov ebx, dword [ebp + 8]
mov ecx, ebx
push eax
call main
mov dword [ebp - 0x20], esi
call dword [sym.imp.kernel32.dll_GetUserDefaultLangID]
mov edi, dword [ebp + 0xc]
movzx ecx, ax
mov eax, ecx
mov dword [ebp - 0x18], ecx
and eax, 0x3ff
mov dword [ebp - 0x24], eax
mov ax, cx
shr ax, 0xa
movzx esi, ax
mov eax, 0x3ed
cmp edi, eax
ja 0x40917a
je 0x409173
lea eax, [edi - 0x88]
cmp eax, 0xc
ja case.default.0x409102
jmp dword [eax*4 + 0x4093ab]
push str.CANCEL
jmp 0x4091bc
push str.DWNLD_FAILED
jmp 0x4091bc
push str.DWNLD_STATUS
jmp 0x4091bc
push str.DWNLD_TITLE
jmp 0x4091bc
push str.INSTMSI_TITLE
jmp 0x4091bc
push str.MSI_UNAVAILBLE
jmp 0x4091bc
push str.NOOS_MSG
jmp 0x4091bc
push 0x43ff88
jmp 0x4091bc
push str.REBOOT_MSG
jmp 0x4091bc
push str.SELECTLANG
jmp 0x4091bc
push str.UNSUPPORTED_IE
jmp 0x4091bc
push str.UNSUPPORTED_OS
jmp 0x4091bc
push str.UNSUPPORTED_SP
jmp 0x4091bc
push str.ENGLISH_WITH_ARABIC_SUPPORT
jmp 0x4091bc
mov eax, edi
sub eax, 0x3ee
je 0x4091b7
dec eax
je 0x4091b0
sub eax, 4
je 0x4091a9
dec eax
je 0x4091a2
dec eax
je 0x40919b
dec eax
jne case.default.0x409102
push str.MIG_INSTALL_FAILED_TEXT
jmp 0x4091bc
push str.PATCH_INSTALL_DLG_TEXT
jmp 0x4091bc
push str.PATCH_INSTALL_FAILURE_TEXT
jmp 0x4091bc
push str.VCRT_INST_TITLE
jmp 0x4091bc
push str.FRENCH_MOROCCO
jmp 0x4091bc
push str.ENGLISH_WITH_HEBREW_SUPPORT
lea ecx, [ebp - 0x14]
call main
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
movzx eax, ax
dec eax
push 3
pop edx
cmp eax, 0x26
ja case.0x4091da.3
jmp dword [eax*4 + 0x4093df]
mov eax, 0x401
cmp ax, cx
je 0x40920f
cmp edi, 0x3ed
je case.0x4091da.3
cmp edi, 0x3ee
je case.0x4091da.3
cmp edi, 0x3ef
je case.0x4091da.3
push str.Arabic
jmp 0x409321
push str.Bulgarian
jmp 0x409321
push 2
pop eax
cmp si, ax
je 0x40923a
cmp si, dx
je 0x40923a
push str.ChineseTraditional
jmp 0x409321
push str.ChineseSimplified
jmp 0x409321
push str.Croatian
jmp 0x409321
push str.Czech
jmp 0x409321
push str.Danish
jmp 0x409321
push str.Dutch
jmp 0x409321
push str.Estonian
jmp 0x409321
push str.Finnish
jmp 0x409321
push str.French
jmp 0x409321
push str.German
jmp 0x409321
push str.Greek
jmp 0x409321
push str.Hebrew
jmp 0x409321
push str.Hungarian
jmp 0x409321
push str.Italian
jmp 0x409321
push str.Japanese
jmp 0x409321
push str.Korean
jmp 0x409321
push str.Latvian
jmp 0x409321
push str.Lithuanian
jmp 0x409321
push str.Norwegian
jmp 0x409321
push str.Polish
jmp 0x409321
push str.Portuguese
jmp 0x409321
push str.Romanian
jmp 0x409321
push str.Russian
jmp 0x409321
push str.Slovak
jmp 0x409321
push str.Slovenian
jmp 0x409321
push str.Spanish
jmp 0x409321
push str.Swedish
jmp 0x409321
push str.Turkish
jmp 0x409321
push str.Ukrainian
jmp 0x409321
push str.English
lea ecx, [ebp - 0x10]
call main
mov ecx, dword [ebp - 0x1c]
lea esi, [ecx + 0x12c]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x409342
call fcn.00408691
mov ecx, dword [ebp - 0x1c]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x409379
push esi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00408ff6
push eax
mov ecx, ebx
mov byte [ebp - 4], 3
call main
mov ecx, dword [ebp + 0xc]
push 2
pop eax
mov byte [ebp - 4], al
lea ecx, [ecx - 0x10]
call fcn.00401856
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x409389
push edi
mov ecx, ebx
call main
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00401856
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401856
mov eax, ebx
call fcn.004218ee
ret 8