Function at 0x448f90
Capabilities:
Contain obfuscated stackstrings
Identify system language via api

Disassembly:
push ebp
mov eax, 0x4abf58
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x50
call fcn.004460c0
test eax, eax
je 0x449470
call dword [sym.imp.kernel32.dll_GetUserDefaultLangID]
and ax, 0x3ff
cmp ax, 9
jne 0x449450
mov dword [esp], 0
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
mov esi, dword [sym.imp.gdi32.dll_EnumFontFamiliesA]
sub esp, 4
mov ebx, eax
mov dword [esp + 0xc], 0xcafe
mov dword [esp + 8], 0x445a60
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
sub esp, 0x10
mov edi, eax
mov eax, 0x1523
call fcn.00446860
xor eax, eax
cmp edi, 0xcafe
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.got__08x_n
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x48]
mov dword [esp + 8], 0x4494b0
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x4abf58
mov dword [esp], ebx
call esi
sub esp, 0x10
mov edi, eax
mov eax, 0x1526
call fcn.00446860
xor eax, eax
test edi, edi
mov dword [esp + 4], str.font_Arial_is_not_enumerated_n
sete al
mov dword [esp], eax
call fcn.004471c0
cmp dword [ebp - 0x2c], 0x61697241
je 0x449490
mov edi, 1
mov eax, 0x1528
xor edi, 1
call fcn.00446860
lea eax, [ebp - 0x2c]
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], str.expected_Arial_got__s_n
call fcn.004471c0
mov eax, 0x1529
call fcn.00446860
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.expected_FW_NORMAL_got__ld_n
cmp eax, 0x190
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004471c0
mov eax, 0x6c
mov dword [ebp - 0x2c], 0x61697241
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x48]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4543b0
mov dword [esp + 4], 0
call esi
sub esp, 0x10
mov edi, eax
mov eax, 0x152d
call fcn.00446860
xor eax, eax
test edi, edi
mov dword [esp + 4], str.font_Arial_is_not_enumerated_n
sete al
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x2c]
mov edi, dword [sym.imp.msvcrt.dll_strcmp]
mov dword [esp + 4], 0x4abf58
mov dword [esp], eax
call edi
mov dword [ebp - 0x4c], eax
mov eax, 0x152f
call fcn.00446860
lea eax, [ebp - 0x2c]
mov dword [esp + 4], str.expected_Arial_got__s_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x4c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004471c0
mov eax, 0x1530
call fcn.00446860
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.expected_FW_NORMAL_got__ld_n
cmp eax, 0x190
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x48]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4494b0
mov dword [esp + 4], str.Arial_Bold
call esi
sub esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, 0x1533
call fcn.00446860
mov dword [esp + 4], str.font_Arial_Bold_is_not_enumerated_n
mov edx, dword [ebp - 0x4c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x2c]
mov dword [esp + 4], 0x4abf58
mov dword [esp], eax
call edi
mov dword [ebp - 0x4c], eax
mov eax, 0x1535
call fcn.00446860
lea eax, [ebp - 0x2c]
mov dword [esp + 4], str.expected_Arial_got__s_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x4c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004471c0
mov eax, 0x1536
call fcn.00446860
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.expected_FW_BOLD_got__ld_n
cmp eax, 0x2bc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x28], 0x6f42206c
mov dword [ebp - 0x2c], 0x61697241
mov dword [ebp - 0x25], 0x646c6f
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4543b0
mov dword [esp + 4], 0
call esi
sub esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, 0x153a
call fcn.00446860
mov dword [esp + 4], str.font_Arial_Bold_should_not_be_enumerated_n
mov edx, dword [ebp - 0x4c]
mov dword [esp], edx
call fcn.004471c0
lea eax, [ebp - 0x48]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4494b0
mov dword [esp + 4], str.Arial_Bold_Italic
call esi
sub esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, 0x153d
call fcn.00446860
mov dword [esp + 4], str.font_Arial_Bold_Italic_is_not_enumerated_n
mov edx, dword [ebp - 0x4c]
xor eax, eax
test edx, edx
sete al
mov dword [esp], eax
call fcn.004471c0
lea eax, [ebp - 0x2c]
mov dword [esp + 4], 0x4abf58
mov dword [esp], eax
call edi
mov edi, eax
mov eax, 0x153f
call fcn.00446860
lea eax, [ebp - 0x2c]
mov dword [esp + 4], str.expected_Arial_got__s_n
mov dword [esp + 8], eax
xor eax, eax
test edi, edi
sete al
mov dword [esp], eax
call fcn.004471c0
mov eax, 0x1540
call fcn.00446860
mov eax, dword [ebp - 0x38]
mov dword [esp + 4], str.expected_FW_BOLD_got__ld_n
cmp eax, 0x2bc
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.004471c0
mov edx, 0x63
lea eax, [ebp - 0x48]
mov dword [ebp - 0x2c], 0x61697241
mov word [ebp - 0x1c], dx
mov dword [ebp - 0x28], 0x6f42206c
mov dword [ebp - 0x24], 0x4920646c
mov dword [ebp - 0x20], 0x696c6174
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4543b0
mov dword [esp + 4], 0
call esi
sub esp, 0x10
mov edi, eax
mov eax, 0x1544
call fcn.00446860
mov dword [esp], edi
mov dword [esp + 4], str.font_Arial_Bold_Italic_should_not_be_enumerated_n
call fcn.004471c0
lea eax, [ebp - 0x48]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4494b0
mov dword [esp + 4], str.Arial_Italic_Bold
call esi
sub esp, 0x10
mov edi, eax
mov eax, 0x1547
call fcn.00446860
mov dword [esp], edi
mov dword [esp + 4], str.font_Arial_Italic_Bold__should_not_be_enumerated_n
call fcn.004471c0
mov ecx, 0x64
lea eax, [ebp - 0x48]
mov dword [ebp - 0x2c], 0x61697241
mov word [ebp - 0x1c], cx
mov dword [ebp - 0x28], 0x7449206c
mov dword [ebp - 0x24], 0x63696c61
mov dword [ebp - 0x20], 0x6c6f4220
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4543b0
mov dword [esp + 4], 0
call esi
sub esp, 0x10
mov esi, eax
mov eax, 0x154b
call fcn.00446860
mov dword [esp], esi
mov dword [esp + 4], str.font_Arial_Italic_Bold_should_not_be_enumerated_n
call fcn.004471c0
mov dword [esp], ebx
call dword [sym.imp.gdi32.dll_DeleteDC]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x151b
call fcn.00446860
mov dword [esp], str.User_locale_is_not_English__skipping_the_test_n
call fcn.00446a30
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x1514
call fcn.00446860
mov dword [esp], str.Arial_is_not_installed_n
call fcn.00446a30
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
xor edi, edi
cmp word [ebp - 0x28], 0x6c
jne 0x449071
jmp 0x449076