Function at 0x409b5a
Capabilities:
Identify system language via api

Disassembly:
push 0x18
mov eax, 0x43ad91
call fcn.004224e0
mov dword [ebp - 0x1c], ecx
and dword [ebp - 4], 0
and dword [ebp - 0x20], 0
call fcn.0040c667
push eax
lea ecx, [ebp - 0x14]
call main
xor esi, esi
inc esi
mov dword [ebp - 4], esi
call fcn.0040c667
push eax
lea ecx, [ebp - 0x10]
call main
push 2
pop eax
mov byte [ebp - 4], al
call fcn.0040c667
mov ebx, dword [ebp + 8]
mov ecx, ebx
push eax
call main
mov dword [ebp - 0x20], esi
call dword [sym.imp.kernel32.dll_GetUserDefaultLangID]
mov edi, dword [ebp + 0xc]
movzx ecx, ax
mov eax, ecx
mov dword [ebp - 0x18], ecx
and eax, 0x3ff
mov dword [ebp - 0x24], eax
mov ax, cx
shr ax, 0xa
movzx esi, ax
mov eax, 0x3ed
cmp edi, eax
ja 0x409c69
je 0x409c62
lea eax, [edi - 0x88]
cmp eax, 0xc
ja case.default.0x409bf1
jmp dword [eax*4 + 0x409e9a]
push str.CANCEL
jmp 0x409cab
push str.DWNLD_FAILED
jmp 0x409cab
push str.DWNLD_STATUS
jmp 0x409cab
push str.DWNLD_TITLE
jmp 0x409cab
push str.INSTMSI_TITLE
jmp 0x409cab
push str.MSI_UNAVAILBLE
jmp 0x409cab
push str.NOOS_MSG
jmp 0x409cab
push 0x4411d8
jmp 0x409cab
push str.REBOOT_MSG
jmp 0x409cab
push str.SELECTLANG
jmp 0x409cab
push str.UNSUPPORTED_IE
jmp 0x409cab
push str.UNSUPPORTED_OS
jmp 0x409cab
push str.UNSUPPORTED_SP
jmp 0x409cab
push str.ENGLISH_WITH_ARABIC_SUPPORT
jmp 0x409cab
mov eax, edi
sub eax, 0x3ee
je 0x409ca6
dec eax
je 0x409c9f
sub eax, 4
je 0x409c98
dec eax
je 0x409c91
dec eax
je 0x409c8a
dec eax
jne case.default.0x409bf1
push str.MIG_INSTALL_FAILED_TEXT
jmp 0x409cab
push str.PATCH_INSTALL_DLG_TEXT
jmp 0x409cab
push str.PATCH_INSTALL_FAILURE_TEXT
jmp 0x409cab
push str.VCRT_INST_TITLE
jmp 0x409cab
push str.FRENCH_MOROCCO
jmp 0x409cab
push str.ENGLISH_WITH_HEBREW_SUPPORT
lea ecx, [ebp - 0x14]
call main
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
movzx eax, ax
dec eax
push 3
pop edx
cmp eax, 0x26
ja case.0x409cc9.3
jmp dword [eax*4 + 0x409ece]
mov eax, 0x401
cmp ax, cx
je 0x409cfe
cmp edi, 0x3ed
je case.0x409cc9.3
cmp edi, 0x3ee
je case.0x409cc9.3
cmp edi, 0x3ef
je case.0x409cc9.3
push str.Arabic
jmp 0x409e10
push str.Bulgarian
jmp 0x409e10
push 2
pop eax
cmp si, ax
je 0x409d29
cmp si, dx
je 0x409d29
push str.ChineseTraditional
jmp 0x409e10
push str.ChineseSimplified
jmp 0x409e10
push str.Croatian
jmp 0x409e10
push str.Czech
jmp 0x409e10
push str.Danish
jmp 0x409e10
push str.Dutch
jmp 0x409e10
push str.Estonian
jmp 0x409e10
push str.Finnish
jmp 0x409e10
push str.French
jmp 0x409e10
push str.German
jmp 0x409e10
push str.Greek
jmp 0x409e10
push str.Hebrew
jmp 0x409e10
push str.Hungarian
jmp 0x409e10
push str.Italian
jmp 0x409e10
push str.Japanese
jmp 0x409e10
push str.Korean
jmp 0x409e10
push str.Latvian
jmp 0x409e10
push str.Lithuanian
jmp 0x409e10
push str.Norwegian
jmp 0x409e10
push str.Polish
jmp 0x409e10
push str.Portuguese
jmp 0x409e10
push str.Romanian
jmp 0x409e10
push str.Russian
jmp 0x409e10
push str.Slovak
jmp 0x409e10
push str.Slovenian
jmp 0x409e10
push str.Spanish
jmp 0x409e10
push str.Swedish
jmp 0x409e10
push str.Turkish
jmp 0x409e10
push str.Ukrainian
jmp 0x409e10
push str.English
lea ecx, [ebp - 0x10]
call main
mov ecx, dword [ebp - 0x1c]
lea esi, [ecx + 0x130]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x409e31
call fcn.00409180
mov ecx, dword [ebp - 0x1c]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x409e68
push esi
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00409ae5
push eax
mov ecx, ebx
mov byte [ebp - 4], 3
call main
mov ecx, dword [ebp + 0xc]
push 2
pop eax
mov byte [ebp - 4], al
lea ecx, [ecx - 0x10]
call fcn.00401856
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x409e78
push edi
mov ecx, ebx
call main
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00401856
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401856
mov eax, ebx
call fcn.004224ae
ret 8