Function at 0x401000
Capabilities:
Identify system language via api

Disassembly:
sub esp, 0x140
push esi
push edi
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0xa]
mov word [esp + 8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0xaa]
mov word [esp + 0xa8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov cx, ax
and eax, 0x3ff
shr cx, 0xa
dec eax
cmp eax, 0x23
ja case.0x401056.2
jmp dword [eax*4 + 0x401448]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSAR.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPAR.HLP
push ecx
jmp 0x401415
and ecx, 0xffff
lea eax, [ecx - 1]
cmp eax, 4
ja case.0x401056.2
jmp dword [eax*4 + 0x4014d8]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSZHT.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPZHT.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSZHC.DLL
push ecx
call esi
push str.NVWCPZHC.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSDA.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPDA.HLP
push ecx
jmp 0x401415
and ecx, 0xffff
sub ecx, 2
je 0x401112
sub ecx, 4
jne case.0x401056.2
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSENG.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPENG.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSDE.DLL
push ecx
call esi
push str.NVWCPDE.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSFI.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPFI.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSFR.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPFR.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSES.DLL
push ecx
call esi
push str.NVWCPES.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSIT.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPIT.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSJA.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPJA.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSKO.DLL
push ecx
call esi
push str.NVWCPKO.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSNL.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPNL.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSNO.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPNO.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSRU.DLL
push ecx
call esi
push str.NVWCPRU.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSSV.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPSV.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSTH.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPTH.HLP
push eax
jmp 0x401415
and ecx, 0xffff
dec ecx
je 0x4012f2
dec ecx
jne case.0x401056.2
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSPT.DLL
push ecx
call esi
push str.NVWCPPT.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSPTB.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPPTB.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSCS.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPCS.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSEL.DLL
push ecx
call esi
push str.NVWCPEL.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSHE.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPHE.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSHU.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPHU.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSPL.DLL
push ecx
call esi
push str.NVWCPPL.HLP
jmp 0x40140d
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 8]
push str.NVWRSSK.DLL
push eax
call esi
lea ecx, [esp + 0xa8]
push str.NVWCPSK.HLP
push ecx
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [esp + 8]
push str.NVWRSSL.DLL
push edx
call esi
lea eax, [esp + 0xa8]
push str.NVWCPSL.HLP
push eax
jmp 0x401415
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [esp + 8]
push str.NVWRSTR.DLL
push ecx
call esi
push str.NVWCPTR.HLP
lea edx, [esp + 0xac]
push edx
call esi
lea eax, [esp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
pop edi
mov dword [0x40fcdc], eax
test eax, eax
pop esi
jne 0x401439
mov ecx, dword [0x40fd0c]
mov dword [0x40fcdc], ecx
mov eax, 1
add esp, 0x140
ret