Function at 0x1004716a
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061a95
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x118
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x1004728b
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xb4], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xb8]
movzx eax, byte [eax]
test eax, eax
je 0x10047249
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
push dword [ebp - 0xc4]
lea eax, [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.10048059
mov ecx, eax
call fcn.10047d8f
jmp 0x10047286
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
push dword [eax]
mov ecx, dword [ebp - 0x78]
call fcn.10017e07
jmp 0x10047792
mov dword [ebp - 0x54], 0x7eb8
mov dword [ebp - 0x7c], 0x1000ba58
cmp dword [ebp - 0x54], 0x81a9
jle 0x1004732e
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
and dword [ebp - 0x3c], 0
jmp 0x100472b9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x32b
jge 0x10047321
and dword [ebp - 0x28], 0
jmp 0x100472cf
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x5c8c
jge 0x1004731f
and dword [ebp - 0x40], 0
jmp 0x100472e5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x7982
jge 0x1004731d
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x28]
xor eax, dword [ebp - 0x40]
cdq
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
mov ecx, 0x10609ad8
call fcn.1000f5cf
jmp 0x100472de
jmp 0x100472c8
jmp 0x100472b2
push 0xdd6
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xac], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x54], 0x7af2
jge 0x10047351
mov edx, dword [ebp - 0x7c]
mov ecx, 0x10609ad8
call fcn.10011079
jmp 0x1004736d
or dword [ebp - 4], 0xffffffff
jmp 0x10047377
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x64], 0x3e8a
mov dword [ebp - 0x9c], 0x1000ba7c
cmp dword [ebp - 0x64], 0x407c
jle 0x10047433
and dword [ebp - 0x38], 0
jmp 0x100473ab
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x65c3
jge 0x10047433
and dword [ebp - 0x4c], 0
jmp 0x100473c1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xf4
jge 0x1004742e
and dword [ebp - 0x30], 0
jmp 0x100473d7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1c14
jge 0x1004742c
and dword [ebp - 0x48], 0
jmp 0x100473ed
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x2d4d
jge 0x1004742a
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x4c]
xor eax, ecx
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
mov ecx, 0x10609ad8
call fcn.1000f5cf
jmp 0x100473e6
jmp 0x100473d0
jmp 0x100473ba
jmp 0x100473a4
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0xf0], 7
lea ecx, [ebp - 0x4d]
call fcn.1000f791
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x110]
call fcn.1000f794
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x108]
call fcn.1000f740
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], 0
jmp 0x100474a4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100474b7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 2
jmp 0x1004749d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x70], 3
jmp 0x100474dc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x70], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x70], 0
jl 0x10047718
mov dword [ebp - 0x44], 0x2e31d83
mov byte [ebp - 0x12], 0
movzx eax, byte [ebp - 0x12]
test eax, eax
je 0x10047511
push 0x1fde
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov dword [ebp - 0x44], 3
jmp 0x10047521
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10047713
mov dword [ebp - 0x20], 0x4ad72d76
mov byte [ebp - 0x11], 0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x10047552
push 0
push 0x26f5
push 0
push 0x755
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov dword [ebp - 0x20], 3
jmp 0x10047562
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1004770e
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x58], 0xa278c007
mov dword [ebp - 0x18], 3
jmp 0x1004758a
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10047709
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x68], 0x7ef3
mov dword [ebp - 0x8c], 0x1000baa8
cmp dword [ebp - 0x68], 0x821f
jle 0x10047677
push 1
push 0x2343
push 0x1beb
push 0xd31
call dword [sym.imp.USER32.dll_SetScrollPos]
and dword [ebp - 0x34], 0
jmp 0x100475e0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x28e2
jge 0x10047677
and dword [ebp - 0x24], 0
jmp 0x100475fa
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x4d27
jge 0x10047672
and dword [ebp - 0x2c], 0
jmp 0x10047610
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xf9c
jge 0x10047670
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x2c]
xor edx, dword [ebp - 0x34]
mov eax, edx
cdq
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x128]
call fcn.1000d000
pop ecx
pop ecx
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
call fcn.1000f5af
push eax
call fcn.1004b356
pop ecx
lea ecx, [ebp - 0x128]
call fcn.1000f5a5
jmp 0x10047609
jmp 0x100475f3
jmp 0x100475d9
mov byte [ebp - 4], 3
cmp dword [ebp - 0x68], 0x7bb9
jge 0x10047690
push dword [ebp - 0x8c]
call fcn.1004b356
pop ecx
jmp 0x100476ac
mov dword [ebp - 4], 2
jmp 0x100476bc
push dword [ebp - 0x18]
lea ecx, [ebp - 0x108]
call fcn.1000f782
cmp dword [eax], 0xd11023dc
jae 0x100476db
mov dword [ebp - 0x60], 1
jmp 0x100476df
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xd711e7bf
jbe 0x100476f7
mov dword [ebp - 0x5c], 1
jmp 0x100476fb
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x94], eax
jmp 0x10047583
jmp 0x1004755b
jmp 0x1004751a
jmp 0x100474c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.1000f766
mov dword [ebp - 4], 5
cmp dword [ebp - 0x64], 0x3c2f
jge 0x10047747
mov edx, dword [ebp - 0x9c]
mov ecx, 0x10609ad8
call fcn.10011079
jmp 0x10047763
or dword [ebp - 4], 0xffffffff
jmp 0x1004776d
push 0xb3
push dword [ebp - 0xa4]
push 0x399f
push 0
push 0x12ec
push dword [ebp - 0xac]
call fcn.1004713f
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret