Function at 0x100b005
Capabilities:
Identify system language via api

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x10110ec]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0
mov edi, 0x4015
push edi
push 0x700d
push ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esi
call fcn.0100fca8
test eax, eax
jne 0x100b05d
cmp dword [0x1011724], eax
je 0x100b136
push 0x1001d5c
push 0x1001d40
push 1
call fcn.0100d7ab
add esp, 0xc
jmp 0x100b136
lea eax, [ebp - 0x4c]
push eax
push dword [esi + 8]
push edi
push 0x700d
push ebx
call fcn.0100fd38
test eax, eax
mov dword [ebp - 0x18], eax
jne 0x100b090
cmp dword [0x1011724], eax
je 0x100b136
push dword [esi + 8]
push 0x1001d04
jmp 0x100b127
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
push edi
push dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
jmp 0x100b0e7
push 0
push eax
push ebx
call fcn.0100e4c5
cmp eax, dword [esi + 8]
jne 0x100b103
push 0x4011
push dword [ebp - 0x18]
push ebx
call fcn.0100e5ae
test eax, eax
je 0x100b13d
push 0
push eax
push ebx
call fcn.0100e4c5
cmp eax, dword [ebp - 0x20]
je 0x100b13d
test eax, eax
je 0x100b13d
lea eax, [ebp - 0x4c]
push eax
push ebx
call fcn.0100fc7c
test eax, eax
mov dword [ebp - 0x18], eax
je 0x100b116
push edi
push eax
push ebx
call fcn.0100e5ae
test eax, eax
jne 0x100b0a2
cmp dword [0x1011724], eax
je 0x100b136
push dword [ebp - 0x18]
push 0x1001cd8
jmp 0x100b127
cmp dword [0x1011724], 0
je 0x100b136
push dword [ebp - 0x18]
push 0x1001ca8
jmp 0x100b127
cmp dword [0x1011724], 0
je 0x100b136
push dword [esi + 8]
push 0x1001c88
push 0x1001d40
push 1
call fcn.0100d7ab
add esp, 0x10
xor eax, eax
jmp 0x100b268
push 0x700e
push dword [ebp - 0x18]
push ebx
call fcn.0100e5ae
test eax, eax
mov dword [ebp - 0x24], eax
je 0x100b211
push 0x6019
push eax
push ebx
call fcn.0100e5ae
mov ecx, eax
test ecx, ecx
je 0x100b1f5
and dword [ebp - 0x14], 0
xor eax, eax
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ecx
push ebx
stosd dword es:[edi], eax
call fcn.0100e53a
mov dword [esi + 0x14], eax
lea eax, [ebp - 0x14]
push eax
push ebx
call fcn.0100f0c2
test eax, eax
je 0x100b1f5
push 4
pop ecx
mov edi, 0x1003be4
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x100b1b2
push 4
pop ecx
mov edi, 0x1003ba4
lea esi, [ebp - 0x14]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x100b1f2
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x100b1f2
cmp word [eax], 0
je 0x100b1f2
push 0x1001c7c
push eax
call sub.ntdll.dll_wcsstr
test eax, eax
pop ecx
pop ecx
jne 0x100b1f2
push dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
push dword [esi + 0x14]
mov edi, 0x10136c0
push 0x1001c60
push edi
call sub.ntdll.dll_swprintf
add esp, 0x10
mov dword [esi + 0x14], edi
mov esi, dword [ebp - 0x1c]
push 0x601a
push dword [ebp - 0x24]
push ebx
call fcn.0100e5ae
test eax, eax
je 0x100b211
push eax
push ebx
call fcn.0100e53a
mov dword [esi + 0x18], eax
push 0x6018
push dword [ebp - 0x18]
push ebx
call fcn.0100e5ae
test eax, eax
je 0x100b22d
push eax
push ebx
call fcn.0100e53a
mov dword [esi + 0x24], eax
push 0x601c
push dword [ebp - 0x18]
push ebx
call fcn.0100e5ae
test eax, eax
je 0x100b249
push eax
push ebx
call fcn.0100e53a
mov dword [esi + 0x20], eax
push 0x601b
push dword [ebp - 0x18]
push ebx
call fcn.0100e5ae
test eax, eax
je 0x100b265
push eax
push ebx
call fcn.0100e53a
mov dword [esi + 0x1c], eax
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.010060f9
leave
ret 8