Function at 0x11013dd0
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor bl, bl
push edi
mov edi, dword [ebp + 8]
cmp byte [ebp + 0x10], bl
je 0x11013e94
lea ecx, [ebp - 0x4c]
call fcn.11001f80
call dword [sym.imp.KeRneL32.DLl_GetUserDefaultUILanguage]
movzx esi, ax
mov eax, 0xc0a
cmp si, ax
jne 0x11013e17
call dword [sym.imp.KeRneL32.DLl_GetUserDefaultLangID]
movzx esi, ax
mov bl, 1
mov eax, dword [ebp - 8]
test eax, eax
je 0x11013e25
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
call dword [sym.imp.aDvapi32.DLL_RevertToSelf]
test bl, bl
je 0x11013e4a
mov edx, 0xc0a
cmp si, dx
je 0x11013e48
mov eax, 0x40a
cmp si, ax
mov esi, 0x580a
jne 0x11013e4a
mov esi, edx
movzx eax, si
cmp eax, 0x181a
jg 0x11013fa2
je 0x1101402b
cmp eax, 0xc0c
jg 0x11013f1e
je case.0x11013e8d.2060
cmp eax, 0x814
jg 0x11013ed3
je 0x11013ec9
sub eax, 0x801
cmp eax, 0x12
ja case.0x11013e8d.2050
movzx ecx, byte [eax + 0x110140fc]
jmp dword [ecx*4 + 0x110140e4]
call dword [sym.imp.KeRneL32.DLl_GetUserDefaultUILanguage]
movzx esi, ax
mov ecx, 0xc0a
cmp si, cx
jne 0x11013e4a
call dword [sym.imp.KeRneL32.DLl_GetUserDefaultLangID]
movzx esi, ax
jmp 0x11013e2f
mov esi, 0x413
jmp case.0x11013e8d.2050
mov esi, 0x410
jmp case.0x11013e8d.2050
mov esi, 0x414
jmp case.0x11013e8d.2050
cmp eax, 0xc01
jg 0x11013f04
je case.0x11013e8d.2049
sub eax, 0x819
je 0x11013efa
sub eax, 4
jne case.0x11013e8d.2050
mov esi, 0x41d
jmp case.0x11013e8d.2050
mov esi, 0x419
jmp case.0x11013e8d.2050
sub eax, 0xc04
je 0x11013f6a
sub eax, 3
jne case.0x11013e8d.2050
mov esi, 0x407
jmp case.0x11013e8d.2050
cmp eax, 0x1404
jg 0x11013f74
je 0x11013f6a
cmp eax, 0x1007
jg 0x11013f4a
je case.0x11013e8d.2055
sub eax, 0x1001
je case.0x11013e8d.2049
sub eax, 3
jne case.0x11013e8d.2050
mov esi, 0x804
jmp case.0x11013e8d.2050
cmp eax, 0x100c
je case.0x11013e8d.2060
cmp eax, 0x1401
jne case.0x11013e8d.2050
mov esi, 0x401
jmp case.0x11013e8d.2050
mov esi, 0x404
jmp case.0x11013e8d.2050
cmp eax, 0x1801
jg 0x11013f92
je case.0x11013e8d.2049
sub eax, 0x1407
je case.0x11013e8d.2055
sub eax, 5
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
cmp eax, 0x180c
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
cmp eax, 0x2c1a
jg 0x11014032
je 0x1101402b
cmp eax, 0x240c
jg 0x11013ff5
je case.0x11013e8d.2060
cmp eax, 0x2001
jg 0x11013fda
je case.0x11013e8d.2049
sub eax, 0x1c01
je case.0x11013e8d.2049
sub eax, 0xb
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
cmp eax, 0x200c
je case.0x11013e8d.2060
cmp eax, 0x2401
je case.0x11013e8d.2049
jmp case.0x11013e8d.2050
cmp eax, 0x280c
jg 0x11014019
je case.0x11013e8d.2060
cmp eax, 0x241a
je 0x1101402b
cmp eax, 0x2801
je case.0x11013e8d.2049
jmp case.0x11013e8d.2050
sub eax, 0x2c01
je case.0x11013e8d.2049
sub eax, 0xb
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
mov esi, 0x81a
jmp case.0x11013e8d.2050
cmp eax, 0x380c
jg 0x1101406e
je case.0x11013e8d.2060
cmp eax, 0x3401
jg 0x1101405a
je case.0x11013e8d.2049
sub eax, 0x3001
je case.0x11013e8d.2049
sub eax, 0xb
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
cmp eax, 0x340c
je case.0x11013e8d.2060
cmp eax, 0x3801
je case.0x11013e8d.2049
jmp case.0x11013e8d.2050
cmp eax, 0x4001
jg 0x1101408d
je case.0x11013e8d.2049
sub eax, 0x3c01
je case.0x11013e8d.2049
sub eax, 0xb
je case.0x11013e8d.2060
jmp case.0x11013e8d.2050
cmp eax, 0xe40c
jne case.0x11013e8d.2050
mov esi, 0x40c
test edi, edi
je 0x110140cd
mov edx, dword [ebp + 0xc]
push edx
push edi
push 0
call dword [sym.imp.KeRneL32.DLl_GetModuleFileNameA]
push 0x5c
push edi
call fcn.11081e00
add esp, 8
test eax, eax
je 0x110140cd
movzx ecx, si
push ecx
inc eax
push 0x1119710c
push eax
call dword [sym.imp.uSEr32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp - 4]
pop edi
mov ax, si
pop esi
xor ecx, ebp
pop ebx
call fcn.11162bb7
mov esp, ebp
pop ebp
ret