Function at 0x41ef30
Capabilities:
Identify system language via api

Disassembly:
push 0xffffffffffffffff
push 0x42fb68
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov eax, dword [0x43c024]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
xor ebx, ebx
lea eax, [ebx + 1]
lea ecx, [esp + 0x20]
xor edi, edi
call fcn.0041b020
mov dword [esp + 0x34], ebx
cmp dword [esp + 0x3c], 6
jae 0x41ef75
lea edi, [ebx + 1]
mov eax, dword [esp + 0x20]
push str.INSTALL
push eax
call fcn.00405140
test eax, eax
jne 0x41ef93
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x41f11d
mov ecx, dword [esp + 0x20]
push str.SYSTEM
push ecx
call fcn.00405140
test eax, eax
jne 0x41f0be
cmp edi, ebx
je 0x41efb9
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x41f11d
push str.Kernel32.dll
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
cmp esi, ebx
je 0x41f0a3
push str.GetSystemPreferredUILanguages
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x41f001
lea edx, [esp + 0x14]
push edx
push ebx
lea ecx, [esp + 0x20]
push ecx
push 4
call eax
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp edi, ebx
je 0x41f0a3
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or eax, ecx
push eax
call fcn.00421cbb
mov ebp, eax
add esp, 4
cmp ebp, ebx
jne 0x41f048
xor al, al
mov byte [esp + 0x3c], al
push 0x437fa8
lea eax, [esp + 0x40]
push eax
call fcn.0042d7d5
push str.Kernel32.dll
xor edi, edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
cmp esi, ebx
je 0x41f09a
push str.GetSystemPreferredUILanguages
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x41f07c
lea ecx, [esp + 0x14]
push ecx
push ebp
lea edx, [esp + 0x20]
push edx
push 4
call eax
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp edi, ebx
je 0x41f09a
lea eax, [esp + 0x1c]
push eax
push 0x434e90
push ebp
call fcn.00422706
add esp, 0xc
push ebp
call fcn.00421bde
add esp, 4
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
jne 0x41f0b2
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
jmp 0x41f137
mov ecx, dword [esp + 0x20]
push str.USER
push ecx
call fcn.00405140
test eax, eax
jne 0x41f0d9
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x41f11d
sub esp, 0xc
mov esi, esp
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x48], esp
cmp eax, ebx
je 0x41f0f9
push eax
call fcn.00404e70
mov edx, dword [esp + 0x2c]
mov ecx, dword [esi]
nop
movzx eax, word [edx]
mov word [ecx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x41f100
mov edx, dword [esp + 0x30]
mov dword [esi + 4], edx
call fcn.0041e940
movzx eax, ax
cmp edi, ebx
jne 0x41f12d
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
jmp 0x41f137
movzx eax, ax
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [esp + 0x34], 0xffffffff
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00421bde
add esp, 4
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 4