Function at 0x41b91a
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcc
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x1c], 0xffffffff
inc edi
lea ecx, [ebp - 0x98]
push edi
call fcn.00413c51
push 3
pop esi
push esi
lea ecx, [ebp - 0x8c]
call fcn.00413c51
xor eax, eax
mov dword [ebp - 0x4c], 0x1e6
mov dword [ebp - 0xc], eax
jmp 0x41b96c
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x98]
mov dword [ecx + edx*4], 0xfffffffc
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x41b959
mov dword [ebp - 0xc], eax
jmp 0x41b989
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx + edx*4], 0x1f2e9667
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x41b976
mov dword [ebp - 0x1c], 0xfffffff2
jmp 0x41b9ad
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x41b9aa
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jl 0x41b997
mov eax, dword [ebp - 0x98]
xor edx, edx
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x8c]
setle dl
xor ecx, ecx
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setne cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x8c]
call fcn.00413d23
lea ecx, [ebp - 0x98]
call fcn.00413d23
mov dword [ebp - 8], 8
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0x108fa7ad
mov dword [ebp - 8], 0x10
cmp dword [ebp - 8], 0xffffffee
push 2
pop edx
jle 0x41ba67
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x34], 9
mov dword [ebp - 4], eax
jmp 0x41ba34
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x54], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x41ba2a
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x38]
jge 0x41ba48
mov ecx, edi
cmp dword [ebp - 0x50], eax
jne 0x41ba4a
mov ecx, eax
mov dword [ebp - 0x54], ecx
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x34], edi
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffee
jg 0x41ba14
jmp 0x41ba69
xor eax, eax
push 4
mov dword [ebp - 8], 0xfffffffb
pop ebx
jmp 0x41bb43
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], eax
jmp 0x41ba8a
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x80], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jl 0x41ba80
mov byte [ebp - 0x22], al
cmp byte [ebp - 0x22], 0
je 0x41baa1
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
xor eax, eax
mov dword [ebp - 0x78], eax
jmp 0x41bb36
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x18], 0x67684abf
mov dword [ebp - 0x18], 0x18158fb5
mov dword [ebp - 4], eax
jmp 0x41bad4
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xbc], 0x49f2b782
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x41bac3
mov dword [ebp - 0x2c], 0xffffffed
cmp dword [ebp - 0x2c], 0xffffffea
jg 0x41bb33
push ebx
lea ecx, [ebp - 0x60]
call fcn.00413c51
mov dword [ebp - 0x30], 0
jmp 0x41bb08
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
mov dword [eax + ecx*4], 0x97ab83de
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x41baf8
cmp dword [ebp - 8], 0
lea ecx, [ebp - 0x60]
jne 0x41bb2c
mov eax, dword [ebp - 0x60]
inc dword [eax + 8]
call fcn.00413d23
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffea
jle 0x41bae6
jmp 0x41bb31
call fcn.00413d23
xor eax, eax
dec dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xfffffffc
jg 0x41baa9
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffed
je 0x41ba78
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x48], eax
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x44], eax
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0x40], eax
push eax
lea ecx, [ebp - 0x48]
movdqu xmmword [ebp - 0xb0], xmm0
call fcn.00415220
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], 0xba86ba47
mov dword [ebp - 0x38], 0xade0980d
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x10], 0xffffffee
cmp dword [ebp - 0x10], 0xfffffff2
jl 0x41bd00
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x3c], 0x22e6
xor ecx, ecx
mov dword [ebp - 0x34], 0x9900
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffff
setne cl
add ecx, dword [ebp - 0x34]
imul eax, ecx, 0xfffffff8
test eax, eax
je 0x41bc16
xor eax, eax
mov byte [ebp - 0x1e], al
cmp byte [ebp - 0x1e], al
je 0x41bced
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x41bced
mov dword [ebp - 0x28], 0xc9bf5e4d
xor eax, eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 4], eax
jmp 0x41bc3c
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xa0], 0x6ab2aee5
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x41bc2b
cmp dword [ebp - 0x14], eax
jne 0x41bcfa
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x6c], ecx
test ecx, ecx
je 0x41bc9b
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x6c], 0x551b32e2
mov dword [ebp - 4], eax
cmp dword [ebp - 4], eax
je 0x41bc6a
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
xor ebx, ebx
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
sub edx, ecx
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
setle bl
sub ebx, 0x9c2b
je 0x41bc9b
xor esi, esi
inc esi
jmp 0x41bc9d
mov esi, eax
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xa0], edx
mov ecx, dword [ebp - 0x38]
sub edx, ecx
cmp edx, esi
jl 0x41bcbf
mov byte [ebp - 0x1f], al
cmp byte [ebp - 0x1f], al
je 0x41bced
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x41bced
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], al
je 0x41bcd4
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
xor eax, eax
mov byte [ebp - 0x20], al
cmp byte [ebp - 0x20], 0
je 0x41bced
push 0x71
push 0xf76
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff2
jge 0x41bbc6
push 4
xor edi, edi
pop ebx
inc edi
mov dword [ebp - 0x10], 0
jmp 0x41bd16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcc], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x41bd09
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x48]
mov dword [eax], 0xfffffff6
call fcn.00413d23
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret