Function at 0x401170
Capabilities:
Identify system language via api

Disassembly:
sub esp, 0x144
mov eax, dword [0x43c730]
xor eax, esp
mov dword [esp + 0x140], eax
push esi
xor eax, eax
push 0x9e
push eax
lea ecx, [esp + 0xe]
push ecx
mov word [esp + 0x10], ax
call fcn.00422290
xor edx, edx
push 0x9e
push edx
lea eax, [esp + 0xba]
push eax
mov word [esp + 0xbc], dx
call fcn.00422290
add esp, 0x18
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov cx, ax
and eax, 0x3ff
shr cx, 0xa
dec eax
movzx ecx, cx
cmp eax, 0x23
ja case.0x4011de.2
jmp dword [eax*4 + 0x40164c]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSAR.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPAR.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
movzx eax, cx
dec eax
cmp eax, 4
ja case.0x4011de.2
jmp dword [eax*4 + 0x4016dc]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSZHT.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPZHT.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSZHC.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPZHC.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSDA.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPDA.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
movzx eax, cx
sub eax, 2
je 0x401292
sub eax, 4
jne case.0x4011de.2
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSENG.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPENG.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSDE.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPDE.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSFI.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPFI.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSFR.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPFR.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
movzx eax, cx
dec eax
cmp eax, 0x13
ja case.0x4011de.2
movzx eax, byte [eax + 0x4016f8]
jmp dword [eax*4 + 0x4016f0]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSES.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPES.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSESM.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPESM.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSIT.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPIT.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSJA.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPJA.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSKO.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPKO.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSNL.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPNL.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSNO.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPNO.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSRU.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPRU.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSSV.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPSV.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
call entry0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test eax, eax
je 0x40147c
push str.NVWRSTH.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPTH.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
movzx eax, cx
sub eax, 1
je 0x4014bb
sub eax, 1
jne case.0x4011de.2
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSPT.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPPT.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSPTB.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPPTB.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSCS.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPCS.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSEL.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPEL.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSHE.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPHE.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSHU.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPHU.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSPL.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPPL.chm
jmp 0x4015d6
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSSK.DLL
lea edx, [esp + 8]
push edx
call esi
push str.NVWCPSK.chm
lea eax, [esp + 0xa8]
push eax
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSSL.DLL
lea ecx, [esp + 8]
push ecx
call esi
push str.NVWCPSL.chm
lea edx, [esp + 0xa8]
push edx
jmp 0x4015de
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.NVWRSTR.DLL
lea eax, [esp + 8]
push eax
call esi
push str.NVWCPTR.chm
lea ecx, [esp + 0xa8]
push ecx
call esi
cmp word [esp + 4], 0
je 0x401614
push str.nwiz.exe
call fcn.00401050
lea edx, [esp + 8]
push edx
mov esi, eax
call fcn.00401050
add esp, 8
cmp esi, eax
jne 0x401614
lea eax, [esp + 4]
push eax
call fcn.00404550
add esp, 4
jmp 0x401619
mov eax, dword [0x4464d0]
mov dword [0x43dae4], eax
test eax, eax
pop esi
mov eax, 1
jne 0x401634
mov ecx, dword [0x4464d0]
mov dword [0x43dae4], ecx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.00422272
add esp, 0x144
ret