Function at 0x406dff
Capabilities:
Identify system language via api

Disassembly:
push 0x14
mov eax, 0x43013d
call fcn.00419a9a
mov dword [ebp - 0x20], ecx
and dword [ebp - 4], 0
and dword [ebp - 0x1c], 0
call fcn.00408a1f
push eax
lea ecx, [ebp - 0x14]
call fcn.00401212
xor esi, esi
inc esi
mov dword [ebp - 4], esi
call fcn.00408a1f
push eax
lea ecx, [ebp - 0x10]
call fcn.00401212
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 2
call fcn.00401326
mov dword [ebp - 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx ebx, ax
mov ax, bx
shr ax, 0xa
movzx eax, ax
mov esi, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
mov edi, 0x3ed
and esi, 0x3ff
cmp eax, edi
ja 0x406eea
je 0x406ee3
add eax, 0xffffff78
cmp eax, 0xc
ja case.default.0x406e81
jmp dword [eax*4 + 0x4070f7]
push str.CANCEL
jmp 0x406f0c
push str.DWNLD_FAILED
jmp 0x406f0c
push str.DWNLD_STATUS
jmp 0x406f0c
push str.DWNLD_TITLE
jmp 0x406f0c
push str.INSTMSI_TITLE
jmp 0x406f0c
push str.MSI_UNAVAILBLE
jmp 0x406f0c
push str.NOOS_MSG
jmp 0x406f0c
push 0x434ad8
jmp 0x406f0c
push str.REBOOT_MSG
jmp 0x406f0c
push str.SELECTLANG
jmp 0x406f0c
push str.UNSUPPORTED_IE
jmp 0x406f0c
push str.UNSUPPORTED_OS
jmp 0x406f0c
push str.UNSUPPORTED_SP
jmp 0x406f0c
push str.ENGLISH_WITH_ARABIC_SUPPORT
jmp 0x406f0c
sub eax, 0x3ee
je 0x406f07
dec eax
je 0x406f00
sub eax, 4
jne case.default.0x406e81
push str.VCRT_INST_TITLE
jmp 0x406f0c
push str.FRENCH_MOROCCO
jmp 0x406f0c
push str.ENGLISH_WITH_HEBREW_SUPPORT
lea ecx, [ebp - 0x14]
call fcn.00401a16
movzx eax, si
dec eax
cmp eax, 0x26
ja case.0x406f21.3
jmp dword [eax*4 + 0x40712b]
mov eax, 0x401
cmp ax, bx
je 0x406f55
cmp dword [ebp + 0xc], edi
je case.0x406f21.3
cmp dword [ebp + 0xc], 0x3ee
je case.0x406f21.3
cmp dword [ebp + 0xc], 0x3ef
je case.0x406f21.3
push str.Arabic
jmp 0x407068
push str.Bulgarian
jmp 0x407068
cmp word [ebp - 0x18], 2
je 0x406f81
cmp word [ebp - 0x18], 3
je 0x406f81
push str.ChineseTraditional
jmp 0x407068
push str.ChineseSimplified
jmp 0x407068
push str.Croatian
jmp 0x407068
push str.Czech
jmp 0x407068
push str.Danish
jmp 0x407068
push str.Dutch
jmp 0x407068
push str.Estonian
jmp 0x407068
push str.Finnish
jmp 0x407068
push str.French
jmp 0x407068
push str.German
jmp 0x407068
push str.Greek
jmp 0x407068
push str.Hebrew
jmp 0x407068
push str.Hungarian
jmp 0x407068
push str.Italian
jmp 0x407068
push str.Japanese
jmp 0x407068
push str.Korean
jmp 0x407068
push str.Latvian
jmp 0x407068
push str.Lithuanian
jmp 0x407068
push str.Norwegian
jmp 0x407068
push str.Polish
jmp 0x407068
push str.Portuguese
jmp 0x407068
push str.Romanian
jmp 0x407068
push str.Russian
jmp 0x407068
push str.Slovak
jmp 0x407068
push str.Slovenian
jmp 0x407068
push str.Spanish
jmp 0x407068
push str.Swedish
jmp 0x407068
push str.Turkish
jmp 0x407068
push str.Ukrainian
jmp 0x407068
push str.English
lea ecx, [ebp - 0x10]
call fcn.00401a16
mov edi, dword [ebp - 0x20]
lea esi, [edi + 0xe8]
mov eax, dword [esi]
xor ebx, ebx
cmp dword [eax - 0xc], ebx
jne 0x407089
mov ecx, edi
call fcn.00406890
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
je 0x4070c0
push esi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.00405d71
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 3
call fcn.00401494
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.00401039
mov esi, dword [ebp + 8]
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x4070d4
push dword [ebp + 0xc]
mov ecx, esi
call fcn.004019d1
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00401039
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401039
mov eax, esi
call fcn.00419b72
ret 8