Function at 0x1002e4e1
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1002e526
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
movzx eax, byte [eax]
test eax, eax
je 0x1002e521
push 0xb8f
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
jmp 0x1002eb5f
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x10], 0
jmp 0x1002e55e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1002e574
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10c], 0xfffffffe
jmp 0x1002e557
mov dword [ebp - 0x10], 0
jmp 0x1002e584
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002e59a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], 0xff55e00f
jmp 0x1002e57d
mov dword [ebp - 0x20], 0
jmp 0x1002e5aa
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1002e5ba
push 0
call fcn.1002809d
pop ecx
jmp 0x1002e5a3
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1002e5cc
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xc], 0x3e64f147
mov dword [ebp - 0x78], 0xc34f1d4b
mov dword [ebp - 0x34], 0
jmp 0x1002e5f6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002e609
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 8], 0x17571177
jmp 0x1002e5ef
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 8], 0
jmp 0x1002e62e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 8], 0xffffffef
je 0x1002ea59
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x98], 0xb53b3045
mov dword [ebp - 0x80], 0xfffffff8
mov dword [ebp - 0x2c], 0
jmp 0x1002e667
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002e67d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xb8], 0x7709b807
jmp 0x1002e660
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x1002e788
mov dword [ebp - 0xc], 0xbf079684
cmp dword [ebp - 0xc], 0
jne 0x1002e6ae
push 5
pop eax
test eax, eax
jne 0x1002e6ae
and dword [ebp - 0x70], 0
jmp 0x1002e6b5
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jne 0x1002e6d5
mov dword [ebp - 0x8c], 1
jmp 0x1002e6dc
and dword [ebp - 0x8c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 0x8c], eax
jge 0x1002e6fa
mov dword [ebp - 0x90], 1
jmp 0x1002e701
and dword [ebp - 0x90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 0x90], eax
jge 0x1002e71c
mov dword [ebp - 0x54], 1
jmp 0x1002e720
and dword [ebp - 0x54], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x54], eax
jg 0x1002e731
mov dword [ebp - 0x74], 1
jmp 0x1002e735
and dword [ebp - 0x74], 0
cmp dword [ebp - 0x74], 0xffffffff
jg 0x1002e744
mov dword [ebp - 0x5c], 1
jmp 0x1002e748
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5c], eax
jge 0x1002e75f
cmp dword [ebp - 4], 0
jne 0x1002e75f
and dword [ebp - 0x84], 0
jmp 0x1002e769
mov dword [ebp - 0x84], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp eax, dword [ebp - 0x84]
jge 0x1002e784
mov dword [ebp - 0x64], 1
jmp 0x1002e788
and dword [ebp - 0x64], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 8], 0x7af9ca3e
jl 0x1002e7a1
mov dword [ebp - 0x7c], 1
jmp 0x1002e7a5
and dword [ebp - 0x7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 0x7c], eax
jne 0x1002e9d7
mov dword [ebp - 0x6c], 0x6cfc4ff2
mov dword [ebp - 0x14], 0
jmp 0x1002e7cf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002e7e2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0xc6715623
jmp 0x1002e7c8
mov dword [ebp - 0x14], 0
jmp 0x1002e7f2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002e808
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf8], 1
jmp 0x1002e7eb
mov dword [ebp - 0xc], 0x1857497f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 8], 0
jne 0x1002e863
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 4], eax
je 0x1002e852
mov dword [ebp - 0x4c], 1
jmp 0x1002e856
and dword [ebp - 0x4c], 0
xor eax, eax
sub eax, dword [ebp - 0x4c]
jne 0x1002e863
and dword [ebp - 0x50], 0
jmp 0x1002e86a
mov dword [ebp - 0x50], 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 4]
jg 0x1002e885
mov dword [ebp - 0xa0], 1
jmp 0x1002e88c
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 8]
cmp dword [ebp - 4], eax
jl 0x1002e8b4
mov dword [ebp - 0x58], 1
jmp 0x1002e8b8
and dword [ebp - 0x58], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp + eax - 0x3c]
cmp ecx, 0xff81490
jne 0x1002e8d6
mov dword [ebp - 0x60], 1
jmp 0x1002e8da
and dword [ebp - 0x60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x60], eax
jg 0x1002e8f2
mov dword [ebp - 0x68], 1
jmp 0x1002e8f6
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3c]
jne 0x1002e923
push 4
pop eax
test eax, eax
jne 0x1002e923
and dword [ebp - 0x48], 0
jmp 0x1002e92a
mov dword [ebp - 0x48], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x48], eax
jg 0x1002e93e
mov dword [ebp - 0xc0], 1
jmp 0x1002e945
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 4], 0x8aa138a8
jne 0x1002e97a
mov dword [ebp - 0x94], 1
jmp 0x1002e981
and dword [ebp - 0x94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd4], eax
mov eax, 0x9bf0bb9a
dec eax
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xf8]
imul eax, eax, 0x4c7c
mov dword [ebp - 0x80], eax
jmp 0x1002ea54
mov dword [ebp - 0xa4], 0xdd1e
mov dword [ebp - 0x9c], 3
mov dword [ebp - 4], 0
jmp 0x1002e9fb
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xfffffff7
jge 0x1002ea54
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb4], 0xffffffff
push 0x4f6d
push 0x7346
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa4]
push eax
push 0
push 0x1e9d
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.1002a660
add esp, 0x28
jmp 0x1002e9f4
jmp 0x1002e619
cmp dword [ebp - 0x40], 0
jle 0x1002eb5f
mov dword [ebp - 0x30], 0x53b26bdd
mov dword [ebp - 0x30], 0x16
jmp 0x1002ea7a
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe5
jne 0x1002eb0d
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x24], 0
jmp 0x1002ea9b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002eab1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x118], 0xb023ed15
jmp 0x1002ea94
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 2
jmp 0x1002eac7
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002eb08
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0
jmp 0x1002eae4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1002eb06
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x1002eb04
push 0x2d2b
push 0
call fcn.1002c3f7
pop ecx
pop ecx
jmp 0x1002eadd
jmp 0x1002eac0
jmp 0x1002ea73
push 4
push 0x1000
push dword [ebp - 0x40]
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xbc]
add ecx, dword [eax + 0xc]
push ecx
push 0x13a9
push 0x1ee1
call fcn.10027646
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
push dword [ebp - 0x40]
push 0
mov eax, dword [ebp - 0x44]
push dword [eax]
call fcn.1002774b
add esp, 0xc
mov esp, ebp
pop ebp
ret