Function at 0x401000
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
mov eax, dword [0x40b004]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0xa0
xor ebx, ebx
lea eax, [esp + 0x74]
push ebx
push eax
call fcn.00404ed0
add esp, 0xc
push 0x50
lea ecx, [esp + 0x74]
push ecx
push str.GJ_LANG
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
cmp eax, ebx
jne 0x401065
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 0x3ff
and ax, dx
mov ecx, 0x11
cmp cx, ax
jne 0x40107b
jmp 0x401095
jbe 0x401095
push 0x409378
lea edx, [esp + 0x74]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x401095
mov byte [0x40bb5a], bl
mov dword [0x40bb40], 0x409330
mov dword [0x40bb5c], 0x4090a8
push 0x6b
push esi
call dword [sym.imp.USER32.dll_LoadIconW]
push ebx
mov dword [0x40c82c], eax
call dword [sym.imp.ole32.dll_CoInitialize]
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
xor eax, eax
cmp byte [0x40bb5a], bl
push ebx
sete al
push 0x401840
push ebx
add eax, 0x8e
push eax
push esi
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 2
jne 0x4010f3
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.00401ba5
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x40c82c]
push 0x7f00
push ebx
mov dword [esp + 0x2c], 0x30
mov dword [esp + 0x30], 0x203
mov dword [esp + 0x34], 0x4013a0
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
call dword [sym.imp.USER32.dll_LoadCursorW]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 6
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], 0x40bb48
mov dword [esp + 0x54], ebx
call dword [sym.imp.USER32.dll_RegisterClassExW]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
mov dword [0x40c858], esi
call edi
push 1
mov dword [0x40c854], eax
call edi
mov ecx, eax
lea edx, [ecx + ecx]
push ebx
mov eax, 0x55555556
imul edx
push esi
push ebx
push ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x40c854]
push eax
push edx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push ebx
push 0x80000000
mov dword [0x40c850], ecx
mov ecx, dword [0x40bb40]
push ecx
push 0x40bb48
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4010d4
push ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x20], 1
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
mov eax, dword [0x40c858]
push str.RT_RCDATA
push 0x89
push eax
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
cmp eax, ebx
jne 0x40120a
xor eax, eax
jmp 0x401211
mov ecx, esi
call fcn.004012a0
mov dword [0x40c848], eax
cmp eax, ebx
je 0x401228
push 0x40c830
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
push ebx
lea ecx, [esp + 0x60]
push ecx
call esi
test eax, eax
je 0x401262
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x54]
push edx
call edi
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push ebx
push ebx
push ebx
lea ecx, [esp + 0x60]
push ecx
call esi
test eax, eax
jne 0x401242
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [0x40c848]
cmp eax, ebx
je 0x401283
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 0x5c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401ba5
mov esp, ebp
pop ebp
ret 0x10