Function at 0x1000eb2a
Capabilities:
Get file size
Identify system language via api

Disassembly:
mov eax, 0x1005c367
call fcn.1005b9d8
sub esp, 0xb4
push ebx
xor ebx, ebx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x34], ebx
xor ecx, ecx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x20], 7
push esi
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x1c], 0x4a55f07c
mov dword [ebp - 0x2c], 0x373ee763
mov dword [ebp - 0x2c], 0x924b5411
mov dword [ebp - 0x28], 0xd814
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
cmp eax, 3
push edi
setl cl
mov dword [ebp - 0x10], esp
xor eax, eax
mov edi, edx
cmp ecx, 0x31d26ec1
mov dword [ebp - 0x30], edi
setle al
add eax, 0x1b6a89e5
cmp eax, 0xde5
jne 0x1000ebb6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x18]
inc ecx
cmp ecx, eax
setle dl
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
call fcn.1000af15
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.1000f454
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], 0xcf5720e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000ebfd
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
mov dword [ebp - 0x18], 0x17bb
cmp dword [ebp - 0x18], 0x1b47
jle 0x1000ecb4
push ebx
call dword [sym.imp.USER32.dll_DestroyCursor]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x20], ebx
cdq
idiv ecx
mov eax, ebx
mov ecx, edx
mov dword [ebp - 0x2c], ecx
mov edx, ecx
mov edi, ebx
mov ecx, eax
shl edx, cl
mov dword [ebp - 0x1c], edx
mov eax, edx
lea ecx, [ebp - 0x8c]
or eax, edi
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ec58
mov eax, dword [eax]
push eax
call fcn.1004434f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x8c]
call fcn.100035c0
mov edx, dword [ebp - 0x1c]
inc edi
cmp edi, 0x11b4
jl 0x1000ec3c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x42dd
jl 0x1000ec31
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x3742
jl 0x1000ec22
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x44bc
jl 0x1000ec1d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov edi, dword [ebp - 0x30]
mov byte [ebp - 0x11], bl
cmp dword [ebp - 0x18], 0x1763
jge 0x1000eccb
push str.mec_txyaghkez_zrxisyvoo_vnwhc_galbqn_rjkgo_dizcqmydw_boyysvm_kishci_mflzv_abm
call fcn.1004434f
pop ecx
mov dword [ebp - 4], ebx
cmp byte [ebp - 0x11], 0
je 0x1000ece0
push 0x184a
push ebx
call dword [sym.imp.USER32.dll_GetSubMenu]
mov edx, dword [ebp - 0x48]
lea esi, [edi - 0x77f]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000ed19
cmp dword [eax + 0x10], esi
jge 0x1000ecfe
mov eax, dword [eax + 8]
jmp 0x1000ed02
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000ecf4
cmp ecx, edx
je 0x1000ed19
cmp esi, dword [ecx + 0x10]
jl 0x1000ed19
mov dword [ebp - 0x38], ecx
lea esi, [ebp - 0x38]
jmp 0x1000ed1f
mov dword [ebp - 0x40], edx
lea esi, [ebp - 0x40]
mov esi, dword [esi]
push 2
mov dword [ebp - 0x18], ebx
pop edi
mov dword [ebp - 0x1c], 0x5faafe30
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], edi
jmp 0x1000ed46
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000ed3c
mov dword [ebp - 0x18], 0x1a
jmp 0x1000ede4
push 3
lea ecx, [ebp - 0x6c]
call fcn.10003233
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 0xe446df37
mov dword [ebp - 0x1c], ebx
jmp 0x1000ed7d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000ed71
mov dword [ebp - 0x24], ebx
jmp 0x1000edd1
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x1000edce
push 1
lea ecx, [ebp - 0x54]
call fcn.10003233
mov dword [ebp - 0x1c], ebx
jmp 0x1000edb6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0x7d8cf4c5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000eda6
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x54]
dec dword [eax]
call fcn.100032b6
dec dword [ebp - 0x20]
jns 0x1000ed97
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1000ed88
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], bl
call fcn.100032b6
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
jl 0x1000ed57
mov dword [ebp - 0x24], 0x4f46
cmp dword [ebp - 0x24], 0x50cf
jle 0x1000ee47
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, eax
mov ebx, 0x1731
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x10077e58
cdq
push edx
push eax
call fcn.100030bc
dec esi
dec ebx
jne 0x1000ee0c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x164e
jl 0x1000ee05
inc edi
cmp edi, 0x30b3
jl 0x1000ee00
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov esi, dword [ebp - 0x30]
push 2
pop edi
mov dword [ebp - 0x18], ebx
jmp 0x1000ee95
mov dword [ebp - 0x1c], ebx
jmp 0x1000ee6d
mov dword [ebp - 0x20], 0xb972
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000ee67
call dword [sym.imp.KERNEL32.dll_GetLastError]
inc dword [ebp - 0x20]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
jg 0x1000ee51
mov dword [ebp - 0x1c], ebx
jmp 0x1000ee8c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000ee89
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x1000ee78
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe4
jl 0x1000ee4c
mov byte [ebp - 4], 4
cmp dword [ebp - 0x24], 0x4d9b
jge 0x1000eeb7
mov edx, str.vuifqlma_bvygpq_kublis_quav_jdohvckg_khmwp_igvfafzdz_bnzhcya_nnd
mov ecx, 0x10077e58
call fcn.1000530a
mov dword [ebp - 4], ebx
mov eax, dword [0x1025a69c]
test al, 1
jne 0x1000eeee
or eax, 1
mov dword [0x1025a6c0], 7
mov dword [0x1025a69c], eax
xor eax, eax
push 0x1005d63c
mov dword [0x1025a6bc], ebx
mov word [0x1025a6ac], ax
call fcn.10044325
pop ecx
mov dword [ebp - 0x18], 0xe2db
lea ecx, [ebp - 0x60]
push edi
call fcn.10003233
mov dword [ebp - 0x24], ebx
jmp 0x1000ef39
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1000ef2d
inc dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1000ef6b
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x1000ef68
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
jne 0x1000ef68
dec dword [ebp - 0x20]
jns 0x1000ef58
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1000ef49
lea ecx, [ebp - 0x60]
call fcn.100032b6
cmp esi, dword [ebp - 0x48]
je 0x1000ef9b
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0xbc]
call fcn.10005ea3
pop ecx
xor edi, edi
mov byte [ebp - 4], 6
inc edi
mov dword [ebp - 0x28], edi
jmp 0x1000efb2
push 0x1025a6ac
lea ecx, [ebp - 0xa4]
call fcn.100031d1
mov dword [ebp - 4], 7
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
mov dword [ebp - 0x34], edi
call fcn.100031d1
mov eax, dword [ebp - 0x28]
or eax, 4
test al, 2
je 0x1000efe1
push ebx
and eax, 0xfffffffd
lea ecx, [ebp - 0xa4]
push 1
mov dword [ebp - 0x28], eax
call fcn.10003acb
mov eax, dword [ebp - 0x28]
test al, 1
je 0x1000eff3
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.10003acb
lea ecx, [ebp - 0x48]
call fcn.1000f22e
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret