Function at 0x401a00
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ebx
push ebp
push esi
push edi
mov edi, ecx
call fcn.0040c6cd
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0xc9
push eax
call esi
mov dword [0x5716c8], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xcc
push eax
call esi
mov dword [0x5716c4], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0x81
push eax
call esi
mov dword [0x5716c0], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xca
push eax
call esi
mov dword [0x5716bc], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0x82
push eax
call esi
mov dword [0x5716b8], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xcd
push eax
call esi
mov dword [0x5716b4], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd0
push eax
call esi
mov dword [0x5716b0], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd1
push eax
call esi
mov dword [0x5716ac], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd2
push eax
call esi
mov dword [0x5716a8], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xcf
push eax
call esi
mov dword [0x5716a4], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xce
push eax
call esi
mov dword [0x5716a0], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd3
push eax
call esi
mov dword [0x57169c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe3
push eax
call esi
mov dword [0x571698], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe6
push eax
call esi
mov dword [0x571694], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe9
push eax
call esi
mov dword [0x571690], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd4
push eax
call esi
mov dword [0x57168c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd7
push eax
call esi
mov dword [0x571688], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd8
push eax
call esi
mov dword [0x571684], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd9
push eax
call esi
mov dword [0x571680], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd5
push eax
call esi
mov dword [0x57167c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe4
push eax
call esi
mov dword [0x571678], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe7
push eax
call esi
mov dword [0x571674], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xea
push eax
call esi
mov dword [0x571670], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xd6
push eax
call esi
mov dword [0x57166c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe5
push eax
call esi
mov dword [0x571668], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe8
push eax
call esi
mov dword [0x571664], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe2
push eax
call esi
mov dword [0x571660], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xda
push eax
call esi
mov dword [0x57165c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xdb
push eax
call esi
mov dword [0x571658], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xdc
push eax
call esi
mov dword [0x571654], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xdd
push eax
call esi
mov dword [0x571650], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xde
push eax
call esi
mov dword [0x57164c], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xdf
push eax
call esi
mov dword [0x571648], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe0
push eax
call esi
mov dword [0x571644], eax
call fcn.00410730
call fcn.00410730
mov eax, dword [eax + 0xc]
push 0xe1
push eax
call esi
cmp dword [0x5716d8], 0
mov dword [0x571640], eax
jne 0x401fa3
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x571628
call esi
push 0x571610
call esi
push 0x5715f8
call esi
call fcn.004086f0
mov dword [0x5715f0], eax
call fcn.00402740
mov eax, dword [edi + 0x20]
push 0
push eax
call sub.WTSAPI32.dll_WTSRegisterSessionNotification
test eax, eax
jne 0x401dfd
mov ecx, dword [edi + 0x20]
push eax
push 0x1f4
push 2
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.00402090
test eax, eax
je 0x401e13
mov edx, dword [edi + 0x20]
push edx
call dword [0x5713bc]
add esp, 4
call fcn.004020f0
test eax, eax
je 0x401e34
mov eax, dword [edi + 0x20]
push eax
mov dword [0x571748], eax
call dword [0x5713b0]
add esp, 4
call dword [0x571394]
call fcn.004021d0
test eax, eax
je 0x401e51
push 0x571b28
call dword [0x5711dc]
add esp, 4
call dword [0x5711cc]
xor ebx, ebx
xor esi, esi
xor ebp, ebp
cmp dword [0x571740], ebx
je 0x401f27
cmp dword [0x571744], ebx
je 0x401f27
cmp dword [0x57174c], ebx
je 0x401f27
lea esi, [ebx + 1]
call dword [0x571230]
mov ebx, eax
call fcn.004087f0
mov ebp, eax
cmp ebx, esi
jne 0x401f27
cmp ebp, esi
jne 0x401f27
call fcn.00405820
cmp eax, esi
jne 0x401f23
mov esi, 2
call fcn.004078d0
push 0
push 1
call dword [0x5711b0]
add esp, 8
mov dword [0x5712a0], eax
mov dword [0x5712a4], edx
cmp dword [0x56b608], 0
je 0x401f36
mov eax, dword [edi + 0x20]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0xc8
push 1
push eax
call esi
mov ecx, dword [edi + 0x20]
push 0
push 0x64
push 3
push ecx
call esi
cmp dword [0x5715f0], 2
jb 0x401f82
push str.75293DF8_9D0D_43e3_9143_39E4C2AB881C
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x401f4d
push eax
mov esi, 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401f4f
test eax, eax
jne 0x401ec8
mov dword [0x56b608], 0
cmp esi, 1
jne 0x401f98
call dword [0x5711bc]
cmp ebx, 1
jne 0x401f98
test ebp, ebp
jne 0x401f98
call dword [0x5711a4]
jmp 0x401f98
xor esi, esi
mov dword [0x571710], esi
test esi, esi
jne 0x401f98
call fcn.00408160
test eax, eax
jne 0x401f76
push eax
call dword [0x5713a8]
add esp, 4
push esi
call dword [0x5713a0]
add esp, 4
call fcn.00408130
mov dword [0x571710], eax
jmp 0x401f98
push 0
call dword [0x5713a8]
add esp, 4
push 0
call dword [0x5713a0]
add esp, 4
call dword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
mov dword [0x56b60c], eax
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret