Function at 0x4b5d20
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x34
mov eax, dword [0x7af6e8]
test eax, eax
je 0x4b6ec0
lea ecx, [ebp - 0x18]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
mov esi, dword fs:[0x18]
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 0
call eax
sub esp, 0x10
mov ebx, eax
mov eax, 0x19ac
call fcn.004b3be0
mov dword [esp], ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
call fcn.004b46e0
mov eax, 0x19ad
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19ae
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 1
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19b3
call fcn.004b3be0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19b4
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INVALID_PARAMETER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 5
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19ba
call fcn.004b3be0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19bb
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INVALID_PARAMETER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 0xc
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19c1
call fcn.004b3be0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19c2
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INVALID_PARAMETER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 0x404
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19c9
call fcn.004b3be0
mov dword [esp], ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
call fcn.004b46e0
mov eax, 0x19ca
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19cb
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____5__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xcccccccd
add eax, 0x33333333
cmp eax, 0x33333332
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 0x408
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19d1
call fcn.004b3be0
mov dword [esp], ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
call fcn.004b46e0
mov eax, 0x19d2
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19d3
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19de
call fcn.004b3be0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19df
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INVALID_PARAMETER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19eb
call fcn.004b3be0
mov dword [esp], ebx
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
call fcn.004b46e0
mov eax, 0x19ec
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19ed
call fcn.004b3be0
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], str.Expected_size___ld_____5__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xcccccccd
add eax, 0x33333333
cmp eax, 0x33333332
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 8
call dword [0x7af6e8]
sub esp, 0x10
mov ebx, eax
mov eax, 0x19f3
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
mov dword [esp], ebx
call fcn.004b46e0
mov eax, 0x19f4
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x19f5
call fcn.004b3be0
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
cmp edx, eax
cmovae eax, edx
mov dword [ebp - 0x24], eax
test eax, eax
je 0x4b6cc0
mov eax, dword [ebp - 0x24]
add eax, eax
mov dword [ebp - 0x28], eax
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x4b6edb
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], 0x5a
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll_memset]
mov dword [esp], ebx
mov dword [ebp - 0x2c], eax
call eax
lea eax, [ebp - 0x18]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], 0
call dword [0x7af6e8]
sub esp, 0x10
mov esi, eax
mov eax, 0x1a0a
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
mov dword [esp], esi
call fcn.004b46e0
mov eax, 0x1a0b
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a0c
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b63a6
imul eax, dword [ebp - 0x18], 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
jbe 0x4b6ce0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], 0x5a
mov dword [esp + 8], eax
mov dword [esp], ebx
mov eax, dword [ebp - 0x2c]
call eax
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
lea eax, [ebp - 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov esi, eax
mov eax, 0x1a17
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
mov dword [esp], esi
call fcn.004b46e0
mov eax, 0x1a18
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a19
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____5__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xcccccccd
add eax, 0x33333333
cmp eax, 0x33333332
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
jne 0x4b6c68
mov eax, ebx
xor esi, esi
shr eax, 0x10
cmp word [ebx], 0
mov dword [ebp - 0x20], eax
jne 0x4b64f2
jmp 0x4b6528
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, 0x5d886c
test edx, edx
jne 0x4b64b3
mov edx, 0xffffffff
mov eax, ebx
call fcn.004b38c0
movzx edx, word [ebx + esi*2]
mov dword [esp + 0xc], eax
mov dword [esp + 8], esi
lea eax, [edx - 0x30]
mov dword [esp + 4], str.MUI_LANGUAGE_ID___ld__is_bad_in__s_n
cmp ax, 9
setbe al
sub edx, 0x41
cmp dx, 5
setbe dl
add esi, 1
or eax, edx
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
cmp word [ebx + esi*2], 0
je 0x4b6528
call fcn.0057d110
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x1a1f
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4b6488
movzx eax, bx
mov dword [esp], 0x5d8876
mov dword [esp + 4], eax
call fcn.004b35c0
jmp 0x4b64b3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
lea eax, [ebp - 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], 8
call dword [0x7af6e8]
sub esp, 0x10
mov esi, eax
mov eax, 0x1a27
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
mov dword [esp], esi
call fcn.004b46e0
mov eax, 0x1a28
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a29
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b65e9
imul eax, dword [ebp - 0x18], 0xcccccccd
cmp eax, 0xcccccccd
jae 0x4b6d30
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xdeadbeef
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edi
mov dword [esp], 0x400
call dword [0x7af6e8]
sub esp, 0x10
mov esi, eax
mov eax, 0x1a33
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_succeed_n
mov dword [esp], esi
call fcn.004b46e0
mov eax, 0x1a34
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a35
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b66b6
imul eax, dword [ebp - 0x18], 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
jbe 0x4b6d80
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], 0x5a
mov dword [esp + 8], eax
mov dword [esp], ebx
mov eax, dword [ebp - 0x2c]
call eax
lea eax, [ebp - 0x18]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 4
call dword [0x7af690]
sub esp, 0x14
mov dword [ebp - 0x20], eax
mov eax, 0x1a40
call fcn.004b3be0
mov edx, dword [ebp - 0x20]
xor eax, eax
mov dword [esp + 4], 0x5d910c
test edx, edx
mov dword [esp + 8], edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a41
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a42
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____5__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xcccccccd
add eax, 0x33333333
cmp eax, 0x33333332
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b6796
imul eax, dword [ebp - 0x18], 0xcccccccd
cmp eax, 0xcccccccd
jae 0x4b6dd0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 8
call dword [0x7af690]
sub esp, 0x14
mov dword [ebp - 0x20], eax
mov eax, 0x1a4b
call fcn.004b3be0
mov edx, dword [ebp - 0x20]
xor eax, eax
mov dword [esp + 4], 0x5d910c
test edx, edx
mov dword [esp + 8], edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a4c
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a4d
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b6861
imul eax, dword [ebp - 0x18], 0xcccccccd
cmp eax, 0xcccccccd
jae 0x4b6e20
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0x400
call dword [0x7af690]
sub esp, 0x14
mov dword [ebp - 0x20], eax
mov eax, 0x1a56
call fcn.004b3be0
mov edx, dword [ebp - 0x20]
xor eax, eax
mov dword [esp + 4], 0x5d910c
test edx, edx
mov dword [esp + 8], edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a57
call fcn.004b3be0
mov dword [esp + 4], str.Expected_count___0_n
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a58
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.Expected_size___ld_____6__1_n
mov dword [esp + 8], eax
imul eax, eax, 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
setbe al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
test esi, esi
je 0x4b6938
imul eax, dword [ebp - 0x18], 0xaaaaaaab
add eax, 0x55555555
ror eax, 1
cmp eax, 0x2aaaaaaa
jbe 0x4b6e70
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
mov esi, dword fs:[0x18]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, 0x1a61
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
mov edx, dword [ebp - 0x20]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a62
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INSUFFICIENT_BUFFER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x7a
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a64
call fcn.004b3be0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], str.expected__lu__got__lu_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
lea eax, [ebp - 0x18]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x18], 1
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, 0x1a69
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
mov edx, dword [ebp - 0x20]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a6a
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INSUFFICIENT_BUFFER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x7a
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a6c
call fcn.004b3be0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], str.expected__lu__got__lu_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], 0x5a
mov dword [esp + 8], eax
mov dword [esp], ebx
mov ecx, dword [ebp - 0x2c]
call ecx
lea edx, [ebp - 0x18]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0xc], edx
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp], 4
call dword [0x7af6e8]
sub esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, 0x1a72
call fcn.004b3be0
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
mov edx, dword [ebp - 0x20]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a73
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INSUFFICIENT_BUFFER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x7a
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a75
call fcn.004b3be0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], str.expected__lu__got__lu_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
mov edx, dword [ebp - 0x14]
lea eax, [edx - 2]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], 0x5a
mov dword [esp + 8], eax
mov dword [esp], ebx
mov ecx, dword [ebp - 0x2c]
call ecx
lea eax, [ebp - 0x18]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp], 0
call dword [0x7af6e8]
sub esp, 0x10
mov edi, eax
mov eax, 0x1a7b
call fcn.004b3be0
xor eax, eax
test edi, edi
mov dword [esp + 4], str.Expected_GetSystemPreferredUILanguages_to_fail_n
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a7c
call fcn.004b3be0
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.Expected_error_ERROR_INSUFFICIENT_BUFFER__got__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [esi + 0x34], 0x7a
mov esi, 1
sete al
mov dword [esp], eax
call fcn.004b46e0
mov eax, 0x1a7e
call fcn.004b3be0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
lea ecx, [eax + 2]
cmp edx, ecx
je 0x4b6c1e
add eax, 1
cmp eax, edx
sete al
movzx eax, al
mov esi, eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], str.expected__lu__got__lu_n
mov dword [esp], esi
call fcn.004b46e0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
imul eax, dword [ebp - 0x18], 0xcccccccd
cmp eax, 0xcccccccd
jb 0x4b646e
mov eax, 0x1a1b
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b646e
mov eax, 0x19fa
call fcn.004b3be0
mov dword [esp], str.No_valid_buffer_size_n
call fcn.004b4030
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x1a0e
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b63a6
mov eax, 0x1a2b
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b65e9
mov eax, 0x1a37
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b66b6
mov eax, 0x1a44
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b6796
mov eax, 0x1a4f
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b6861
mov eax, 0x1a5a
call fcn.004b3be0
mov eax, dword [ebp - 0x18]
add eax, 0x7fffffff
movzx ecx, word [ebx + eax*2]
movzx eax, word [ebx + eax*2 - 2]
mov dword [esp + 4], str.Expected_last_two_WCHARs_being_empty__got_0x_x_0x_x_n
mov edx, ecx
mov dword [esp + 0xc], ecx
movzx ecx, ax
or ax, dx
mov dword [esp + 8], ecx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
jmp 0x4b6938
mov eax, 0x19a3
call fcn.004b3be0
mov dword [esp], str.GetSystemPreferredUILanguages_is_not_available._n
call fcn.004b46b0
jmp 0x4b6c5a
mov eax, 0x1a01
call fcn.004b3be0
mov eax, dword [ebp - 0x24]
mov dword [esp], str.Failed_to_allocate_memory_for__ld_chars_n
mov dword [esp + 4], eax
call fcn.004b4030
jmp 0x4b6c5a