Function at 0x4bd6d0
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6110a3
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [0x6c6f60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x44], ecx
call dword [sym.imp.KERNEL32.DLL_GetUserDefaultUILanguage]
mov word [ebp - 0x4c], ax
push 0x6764c6
lea ecx, [ebp - 0x28]
call fcn.0047c100
mov dword [ebp - 4], 0
movzx eax, word [ebp - 0x4c]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x804
jg 0x4bd760
cmp dword [ebp - 0x48], 0x804
je 0x4bdf4a
mov ecx, dword [ebp - 0x48]
sub ecx, 0x401
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x3d
ja case.0x4bd7cc.1
mov edx, dword [ebp - 0x48]
movzx eax, byte [edx + 0x4be2d8]
jmp dword [eax*4 + 0x4be288]
cmp dword [ebp - 0x48], 0xc04
jg 0x4bd79d
cmp dword [ebp - 0x48], 0xc04
je 0x4bdf88
mov ecx, dword [ebp - 0x48]
sub ecx, 0x807
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x37
ja case.0x4bd7cc.1
mov edx, dword [ebp - 0x48]
movzx eax, byte [edx + 0x4be344]
jmp dword [eax*4 + 0x4be318]
cmp dword [ebp - 0x48], 0x1007
jg 0x4bd7d3
cmp dword [ebp - 0x48], 0x1007
je 0x4bdb89
mov ecx, dword [ebp - 0x48]
sub ecx, 0xc07
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 5
ja case.0x4bd7cc.1
mov edx, dword [ebp - 0x48]
jmp dword [edx*4 + 0x4be37c]
cmp dword [ebp - 0x48], 0x2409
jg 0x4bd8d3
cmp dword [ebp - 0x48], 0x2409
je 0x4bdacf
cmp dword [ebp - 0x48], 0x1407
jg 0x4bd82f
cmp dword [ebp - 0x48], 0x1407
je 0x4bdba8
cmp dword [ebp - 0x48], 0x1009
je 0x4bda34
cmp dword [ebp - 0x48], 0x100a
je 0x4bdcbf
cmp dword [ebp - 0x48], 0x100c
je 0x4bdc24
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x180a
jg 0x4bd88c
cmp dword [ebp - 0x48], 0x180a
je 0x4bdcfd
cmp dword [ebp - 0x48], 0x140c
jg 0x4bd87a
cmp dword [ebp - 0x48], 0x140c
je 0x4bdc43
cmp dword [ebp - 0x48], 0x1409
je 0x4bda53
cmp dword [ebp - 0x48], 0x140a
je 0x4bdcde
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x1809
je 0x4bda72
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x2009
jg 0x4bd8c1
cmp dword [ebp - 0x48], 0x2009
je 0x4bdab0
cmp dword [ebp - 0x48], 0x1c09
je 0x4bda91
cmp dword [ebp - 0x48], 0x1c0a
je 0x4bdd1c
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x200a
je 0x4bdd3b
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x380a
jg 0x4bd957
cmp dword [ebp - 0x48], 0x380a
je 0x4bddf5
cmp dword [ebp - 0x48], 0x2c09
jg 0x4bd92b
cmp dword [ebp - 0x48], 0x2c09
je 0x4bdb0d
cmp dword [ebp - 0x48], 0x240a
je 0x4bdd5a
cmp dword [ebp - 0x48], 0x2809
je 0x4bdaee
cmp dword [ebp - 0x48], 0x280a
je 0x4bdd79
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x2c0a
je 0x4bdd98
cmp dword [ebp - 0x48], 0x300a
je 0x4bddb7
cmp dword [ebp - 0x48], 0x340a
je 0x4bddd6
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x480a
jg 0x4bd999
cmp dword [ebp - 0x48], 0x480a
je 0x4bde71
cmp dword [ebp - 0x48], 0x3c0a
je 0x4bde14
cmp dword [ebp - 0x48], 0x400a
je 0x4bde33
cmp dword [ebp - 0x48], 0x440a
je 0x4bde52
jmp case.0x4bd7cc.1
cmp dword [ebp - 0x48], 0x4c0a
je 0x4bde90
cmp dword [ebp - 0x48], 0x500a
je 0x4bdeaf
jmp case.0x4bd7cc.1
push str.Japan
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 1
jmp 0x4be209
push str.America
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0
jmp 0x4be209
push str.Britain
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0
jmp 0x4be209
push str.Australia
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0
jmp 0x4be209
push 0x691804
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0
jmp 0x4be209
push str.New_Zealand
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0
jmp 0x4be209
push str.Ireland
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0
jmp 0x4be209
push str.S._Africa
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0
jmp 0x4be209
push str.Jamaica
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0
jmp 0x4be209
push str.Caribbean
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0
jmp 0x4be209
push str.Belize
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0
jmp 0x4be209
push str.Trinidad
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0
jmp 0x4be209
push str.Germany
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 4
jmp 0x4be209
push 0x691870
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 4
jmp 0x4be209
push str.Austria
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 4
jmp 0x4be209
push 0x69188c
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 4
jmp 0x4be209
push str.Liechtenstein
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 4
jmp 0x4be209
push str.France
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 5
jmp 0x4be209
push str.Belgium
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 5
jmp 0x4be209
push str.Canada
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 5
jmp 0x4be209
push str.Switzerland
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 5
jmp 0x4be209
push str.Luxembourg
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 5
jmp 0x4be209
push 0x6918bc
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Mexico
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Spain
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.Guatemala
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Costa_Rica
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Panama
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.Dominican_Republic
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Venezuela
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Columbia
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.Peru
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Argentina
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Ecuador
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.Chile
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Uruguay
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Paraguay
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.bolivia
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Salvatore
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Honduras
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 3
jmp 0x4be209
push str.Nicaragua
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 3
jmp 0x4be209
push str.Puerto_Rico
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 3
jmp 0x4be209
push str.Russia
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 6
jmp 0x4be209
push str.Portugal
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 7
jmp 0x4be209
push str.Brazil
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 7
jmp 0x4be209
push str.Arab
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 8
jmp 0x4be209
push str.China
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 2
jmp 0x4be209
push str.Taiwan
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0xa
jmp 0x4be209
push str.HongKong
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0xa
jmp 0x4be209
push str.Italy
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 9
jmp 0x4be209
push str.Swiss
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 9
jmp 0x4be209
push str.Korea
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0xb
jmp 0x4be209
push str.Korea__Johab_
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0xb
jmp 0x4be209
push str.Dutch__Standard_
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0xc
jmp 0x4be209
push str.Dutch__Belgian_
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0xc
jmp 0x4be209
push str.Indonesia__Bahasa_
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0xd
jmp 0x4be209
push str.Turkey
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0xe
jmp 0x4be209
push str.India
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0xf
jmp 0x4be209
push str.Thailand
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0x10
jmp 0x4be209
push str.Brunei_Darussalam
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0x11
jmp 0x4be209
push str.Malaysia
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0x11
jmp 0x4be209
push str.Finland
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0x12
jmp 0x4be209
push str.Sweden
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov edx, dword [ebp - 0x44]
mov dword [edx + 0x4d0], 0x12
jmp 0x4be209
push str.Czech_Republic
lea ecx, [ebp - 0x28]
call fcn.004a9090
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x4d0], 0x13
jmp 0x4be209
push 1
push 3
lea ecx, [ebp - 0x104]
call fcn.0048d880
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x104]
test ecx, ecx
je 0x4be1a3
lea edx, [ebp - 0x104]
add edx, 0x10
mov dword [ebp - 0x50], edx
jmp 0x4be1aa
mov dword [ebp - 0x50], 0
movzx eax, word [ebp - 0x4c]
push eax
push str.Unknown__
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.0049a740
add esp, 8
mov ecx, eax
call fcn.004c7260
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x104]
call fcn.0048d7e0
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
lea ecx, [ebp - 0x28]
call fcn.0048c7e0
lea ecx, [ebp - 0x40]
call fcn.0047c030
mov ecx, dword [ebp - 0x44]
mov dword [ecx + 0x4d0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x104]
call fcn.00481790
push 0x691aac
lea ecx, [ebp - 0x28]
call fcn.0047bff0
push eax
lea ecx, [ebp - 0x28]
call fcn.0047bff0
push eax
push 0
push 0
push str.Country
push 0x2d0a
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x4d0]
push eax
mov ecx, dword [ebp - 0x44]
call fcn.004be3a0
mov ecx, dword [ebp - 0x44]
call fcn.004c04b0
push 1
push 1
mov ecx, dword [ebp - 0x44]
call fcn.004bbe90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0047c030
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c978e
mov esp, ebp
pop ebp
ret