Function at 0x401000
Capabilities:
Identify system language via api
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov dword [ebp - 0x2c], 0xaa937b77
mov eax, 0xaa937b77
mov edi, dword [ebp - 0x30]
movzx esi, word [ebp - 0x16]
mov ebx, dword [ebp - 0x28]
cmp eax, 0xf6c5cd5a
jle 0x401064
cmp eax, 0x3bc3b378
jg 0x4010a6
cmp eax, 0x13d0c0b7
jg 0x401117
cmp eax, 0xf6c5cd5b
je 0x40121a
cmp eax, 0xa3fe076
jne 0x40136c
imul edi, edi, 0x1260
add edi, 0xfff7be4d
shr edi, 9
mov eax, 0xa076448d
jmp 0x40101f
cmp eax, 0xd85c26d5
jg 0x4010de
cmp eax, 0xaa937b76
jg 0x401163
cmp eax, 0x895cf966
je 0x401255
cmp eax, 0xa076448d
jne 0x40101f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov word [ebp - 0x1e], ax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [ebp - 0x20], ax
mov eax, 0xeee9bf99
jmp 0x40101f
cmp eax, 0x724743a2
jg 0x40117e
cmp eax, 0x3bc3b379
je 0x401265
cmp eax, 0x64ee4232
jne 0x40101f
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
movzx esi, word [eax + ecx*2]
mov eax, 0x7e43d795
mov ebx, dword [ebp - 0x1c]
jmp 0x40101f
cmp eax, 0xeb227f64
jg 0x4011cc
cmp eax, 0xd85c26d6
je 0x401293
cmp eax, 0xdd27e91b
jne 0x40101f
mov eax, dword [ebp - 0x14]
shl eax, 0x10
add eax, 0x328bb
mov dword [ebp - 0x14], eax
mov eax, 0x895cf966
jmp 0x40101f
cmp eax, 0x241b1475
je 0x4012bb
cmp eax, 0x3a09e3b4
jne 0x401379
mov dword [ebp - 0x34], esi
mov esi, ebx
add edi, 0x34
mov ebx, edi
shr ebx, 4
add ebx, 0xb
call section..text
mov eax, 0xa076448d
cmp edi, 0x43fff50
jb 0x401154
mov eax, 0xa3fe076
shr ebx, 0xf
mov edi, ebx
mov ebx, esi
mov esi, dword [ebp - 0x34]
jmp 0x40101f
cmp eax, 0xaa937b77
je 0x4012c8
cmp eax, 0xc3501d22
je 0x40134a
jmp 0x40101f
cmp eax, 0x724743a3
je 0x4012d9
cmp eax, 0x7e43d795
jne 0x40101f
mov dword [ebp - 0x40], ebx
movsx ecx, si
cmp ecx, 0x43e
jle 0x401314
cmp ecx, 0x818
jg 0x40132f
lea ecx, [esi - 0x43f]
cmp cx, 4
ja 0x40134a
mov edx, 0x13
jmp 0x401328
cmp eax, 0xeb227f65
je 0x4012ed
cmp eax, 0xeee9bf99
jne 0x40101f
mov eax, dword [ebp - 0x14]
shr eax, 1
add eax, 0xffffff75
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1ddf
shl eax, 0xd
dec edx
or eax, 0xef
mov dword [ebp - 0x14], eax
mov eax, 0x3bc3b379
cmp edx, ecx
je 0x40101f
mov eax, 0xd85c26d6
jmp 0x40101f
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x4e]
imul ecx, ecx
imul edx, ecx, 0x4125
add eax, eax
add eax, 0x9c
lea eax, [eax + eax*2]
dec edx
shr eax, 1
and eax, 0x7fffff00
mov dword [ebp - 0x14], eax
mov eax, 0xa076448d
cmp edx, ecx
je 0x40101f
mov eax, 0x724743a3
jmp 0x40101f
mov eax, 0x7e43d795
xor ebx, ebx
movzx esi, word [ebp - 0x1e]
jmp 0x40101f
imul edi, edi, 0xf9
add edi, 0xffffbfce
call section..text
call section..text
mov eax, 0xa076448d
cmp edi, 0x6a
jl 0x40101f
mov eax, 0x3a09e3b4
jmp 0x40101f
mov eax, dword [ebp - 0x10]
movzx ecx, word [ebp - 0x20]
mov word [eax + 2], cx
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov word [ebp - 0x22], ax
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x38], eax
mov eax, 0xeb227f65
jmp 0x40101f
mov eax, dword [ebp - 0x10]
mov eax, 0xa076448d
jmp 0x40101f
push eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
mov eax, 0x241b1475
jmp 0x40101f
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
mov word [ecx], ax
mov eax, 0xdd27e91b
jmp 0x40101f
movzx eax, word [ebp - 0x22]
mov ecx, dword [ebp - 0x38]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x10]
add eax, 6
mov dword [ebp - 0x3c], eax
mov eax, 0xf6c5cd5b
jmp 0x40101f
lea ecx, [esi - 0x419]
cmp cx, 0x13
ja 0x40134a
movzx ecx, cx
mov edx, 0xc8401
bt edx, ecx
jae 0x40134a
jmp 0x401384
movzx ecx, si
cmp ecx, 0x819
je 0x401384
cmp ecx, 0x843
je 0x401384
cmp ecx, 0x82c
je 0x401384
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, 0x845a74
cmp ecx, 4
je 0x40101f
mov eax, 0x64ee4232
jmp 0x40101f
cmp eax, 0x845a74
jne 0x40101f
jmp 0x401399
cmp eax, 0x13d0c0b8
jne 0x40101f
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], edi
mov word [ebp - 0x16], si
mov dword [ebp - 0x28], ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], edi
mov word [ebp - 0x16], si
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret