Function at 0x4c8810
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x228
mov edi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [0x674014]
xor eax, ebp
mov dword [ebp - 0x10], eax
movzx eax, word [ecx + 0x14]
mov dword [ebp - 0x224], eax
movzx eax, word [ecx + 0x16]
mov dword [ebp - 0x234], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
call esi
mov word [ebp - 0x228], ax
movzx eax, word [edi + 0x16]
mov dword [ebp - 0x230], eax
movzx eax, word [edi + 0x14]
mov dword [ebp - 0x22c], eax
call esi
mov esi, ebx
mov word [ebp - 0x226], ax
lea ebx, [ebp - 0x218]
push 0x208
push 0xff
push ebx
call fcn.005dfe70
add esp, 0xc
push esi
push dword [ebp - 0x234]
push dword [ebp - 0x224]
push str.StringFileInfo_04x_04x_ls
push 0x104
push 0x104
push ebx
call fcn.004c8b40
add esp, 0x1c
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0xffffffff
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x21c]
push eax
push ecx
push ebx
push dword [edi + 0x10]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4c88f2
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x4c88f2
mov edx, dword [ebp - 0x220]
test edx, edx
jne 0x4c8a79
push 0x208
push 0xff
push ebx
call fcn.005dfe70
add esp, 0xc
movzx eax, word [ebp - 0x228]
push esi
push dword [ebp - 0x230]
push eax
push str.StringFileInfo_04x_04x_ls
push 0x104
push 0x104
push ebx
call fcn.004c8b40
add esp, 0x1c
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0xffffffff
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
push dword [edi + 0x10]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4c8973
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x4c8973
mov edx, dword [ebp - 0x220]
test edx, edx
jne 0x4c8a79
push 0x208
push 0xff
push ebx
call fcn.005dfe70
add esp, 0xc
push esi
push 0x4e4
push dword [ebp - 0x22c]
push str.StringFileInfo_04x_04x_ls
push 0x104
push 0x104
push ebx
call fcn.004c8b40
add esp, 0x1c
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0xffffffff
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
push dword [edi + 0x10]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4c89f1
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x4c89f1
mov edx, dword [ebp - 0x220]
test edx, edx
jne 0x4c8a79
push 0x208
push 0xff
push ebx
call fcn.005dfe70
add esp, 0xc
movzx eax, word [ebp - 0x226]
push esi
push 0x4e4
push eax
push str.StringFileInfo_04x_04x_ls
push 0x104
push 0x104
push ebx
call fcn.004c8b40
add esp, 0x1c
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x220], 0xffffffff
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
push dword [edi + 0x10]
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x4c8b39
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x4c8b39
mov edx, dword [ebp - 0x220]
test edx, edx
je 0x4c8b39
mov ecx, dword [ebp + 0xc]
mov esi, edx
mov dword [ebp - 0x224], edx
lea ebx, [edx - 1]
movzx edx, byte [ecx + 0xb]
test dl, dl
js 0x4c8a9b
cmp ebx, 4
jbe 0x4c8abc
mov esi, 4
jmp 0x4c8aab
mov esi, SysReAllocString
and esi, dword [ecx + 8]
dec esi
cmp esi, ebx
jae 0x4c8ac4
mov edx, dword [ecx + 4]
push eax
push ebx
sub ebx, esi
push edx
push 0
push edx
push ebx
push esi
call fcn.004c0aa0
jmp 0x4c8b1e
mov esi, ecx
test ebx, ebx
jne 0x4c8aca
jmp 0x4c8b00
mov esi, dword [ecx]
test ebx, ebx
je 0x4c8b00
cmp esi, eax
jae 0x4c8adf
xor edx, edx
movzx edi, word [eax + edx*2]
mov word [esi + edx*2], di
inc edx
cmp ebx, edx
jne 0x4c8ad0
jmp 0x4c8b00
jbe 0x4c8b00
mov edx, dword [ebp - 0x224]
nop word [eax + eax]
movzx edi, word [eax + edx*2 - 4]
mov word [esi + edx*2 - 4], di
dec edx
cmp edx, 1
jne 0x4c8af0
mov eax, dword [ebp + 0xc]
cmp byte [eax + 0xb], 0
js 0x4c8b0e
mov byte [eax + 0xb], bl
jmp 0x4c8b11
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x224]
mov word [esi + eax*2 - 2], 0
mov bl, 1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005dd6f3
mov eax, ebx
add esp, 0x228
pop esi
pop edi
pop ebx
pop ebp
ret 8
xor ebx, ebx
jmp 0x4c8b20