Function at 0x40c880
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ecx, 0x429540
mov ebp, esp
push ebx
mov ebx, 0xede
sub esp, 0x14
mov eax, dword [0x428f1c]
or eax, 0x4b4ebb1e
mov dword [0x428f1c], eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
je 0x40c8bc
add ebx, edx
cmp ebx, 0x1840
jbe 0x40c8a0
add eax, 0x676e01b6
mov dword [0x428f1c], eax
mov eax, dword [0x428f1c]
sub eax, 0x66c3d9ad
and eax, 0xde697bfc
mov dword [0x428f1c], eax
call fcn.00410450
or dword [0x428f1c], 0xa189d799
call fcn.00405eb8
test eax, eax
jne 0x40cc1f
call fcn.00405c54
test eax, eax
jne 0x40cc1f
call fcn.00405a64
test eax, eax
jne 0x40cc1f
call fcn.00405a50
test eax, eax
jne 0x40cc1f
mov eax, dword [0x416104]
mov edx, dword fs:[0x18]
mov dword [eax + 0x54], edx
mov dword [esp], 0xff739440
call fcn.0040c4ec
mov edx, dword [0x416104]
mov dword [edx + 0x40], eax
test eax, eax
je 0x40cc1f
mov dword [esp + 4], 0x3d6bdde9
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 8], edx
mov dword [esp + 4], 0x91fab7f6
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 4], edx
mov dword [esp + 4], 0x78221ed
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov ebx, dword [0x416104]
mov dword [ebx + 0xc], eax
mov eax, dword [0x428f1c]
mov dword [esp + 8], str.ZwQuerySystemInformation_failed___x_
add eax, 0x209a38b2
mov dword [esp + 4], str.The_RPC_server_is_too_busy_to_complete_this_operation.
imul eax, eax, 0x7750896c
mov dword [esp], str.Debugger_printed_exception_on_control_C.
xor eax, 0x6ffec4e8
mov dword [0x428f1c], eax
call fcn.00412570
mov dword [esp + 4], 0xde08e8ea
mov eax, dword [ebx + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x10], edx
mov dword [esp + 4], 0x80a8e59
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x14], edx
mov dword [esp + 4], 0xaba6124e
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x18], edx
mov dword [esp + 4], 0x256daf47
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0040bf10
mov edx, dword [0x416104]
mov dword [edx + 0x1c], eax
mov dword [esp], 0x241b1bc8
call fcn.0040c4ec
mov edx, dword [0x416104]
mov dword [edx + 0x44], eax
test eax, eax
je 0x40cc1f
mov dword [esp + 4], 0x3bb31a91
mov dword [esp], eax
xor dword [0x428f1c], 0x8eedddae
call fcn.0040bf10
mov edx, dword [0x416104]
mov dword [edx + 0x20], eax
imul eax, dword [0x428f1c], 0x9db7298c
mov dword [esp + 4], 0xf61dcd08
and eax, 0xf6d88b5e
or eax, 0x66d0001e
mov dword [0x428f1c], eax
mov eax, dword [edx + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x24], edx
mov dword [esp + 4], 0xbfbb48ca
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x28], edx
mov dword [esp + 4], 0xa949fa15
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x2c], edx
mov dword [esp + 4], 0x4ba3aa21
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
or dword [0x428f1c], 0xd92f9f26
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x30], edx
mov dword [esp + 4], 0x66e48b28
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x34], edx
mov dword [esp + 4], 0x7c08773b
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, eax
mov eax, dword [0x416104]
mov dword [eax + 0x38], edx
mov dword [esp + 4], 0x8831d692
mov eax, dword [eax + 0x44]
mov dword [esp], eax
call fcn.0040bf10
mov edx, dword [0x416104]
mov dword [edx + 0x3c], eax
call fcn.00401344
test eax, eax
jne 0x40cc1f
call fcn.00403330
test eax, eax
jne 0x40cc1f
call fcn.004040d8
test eax, eax
jne 0x40cc1f
call fcn.00402860
test eax, eax
jne 0x40cc1f
call fcn.00405854
test eax, eax
jne 0x40cc1f
call fcn.00403238
test eax, eax
jne 0x40cc1f
mov eax, dword [0x428f1c]
mov ecx, 0x429540
and eax, 0xc1ddbbf
mov dword [0x428f1c], eax
mov dl, byte [ecx]
test dl, dl
je 0x40cbf2
sub edx, 0x30
cmp dl, 9
jbe 0x40cbef
or eax, 0xf4263384
mov dword [0x428f1c], eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
or eax, 0x3fff21d4
mov dword [0x428f1c], eax
jmp 0x40cbf2
inc ecx
jmp 0x40cbc2
imul eax, dword [0x428f1c], 0xf9a53ed5
mov dword [esp + 8], str.ZwQuerySystemInformation_failed___x_
mov dword [esp + 4], str.TPM_1.2:_Incorrect_migration_authority.
mov dword [esp], str.SdbpCheckMatchingDevice
mov dword [0x428f1c], eax
call fcn.00414448
jmp 0x40cc7a
xor dword [0x428f1c], 0x53c2fc09
mov eax, dword [0x416104]
mov dword [eax], 1
xor eax, eax
cmp word [eax + eax + str.TPM_1.2:_Incorrect_migration_authority.], 0
je 0x40cc5a
inc eax
cmp eax, 0x1b4c
jne 0x40cc36
call fcn.0040ed58
xor dword [0x428f1c], 0xc114e3b8
jmp 0x40cc61
cmp eax, 0x7dc
jle 0x40cc66
call fcn.00411cd0
mov eax, dword [0x428f1c]
sub eax, 0x5b57f6fa
xor eax, 0xe8a636ff
mov dword [0x428f1c], eax
add esp, 0x14
pop ebx
pop ebp
ret