Function at 0x448db0
Capabilities:
Get geographical location
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x46972c]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], ecx
xor eax, eax
mov word [ebp - 0x1c], ax
xor ecx, ecx
mov dword [ebp - 0x1a], ecx
mov dword [ebp - 0x16], ecx
mov dword [ebp - 0x12], ecx
mov dword [ebp - 0xe], ecx
mov word [ebp - 0xa], cx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov word [ebp - 0x20], ax
push 0xa
lea edx, [ebp - 0x1c]
push edx
push 7
movzx eax, word [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push 0x45cd38
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 4], 0
movzx edx, word [ebp - 0x20]
and edx, 0xff
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x26
ja case.0x448e37.2
mov edx, dword [ebp - 0x28]
jmp dword [edx*4 + 0x44911c]
push 0x45cd40
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
movzx ecx, word [ebp - 0x20]
cmp ecx, 0xc04
jne 0x448e6f
push 0x45cd48
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x448e9a
movzx eax, word [ebp - 0x20]
cmp eax, 0x404
jne 0x448e8b
push 0x45cd50
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x448e9a
push 0x45cd58
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd60
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd68
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd70
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd78
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd80
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd88
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd90
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cd98
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cda0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cda8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdb0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdb8
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdc0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdc8
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
movzx edx, word [ebp - 0x20]
cmp edx, 0x816
jne 0x448fd4
push 0x45cdd0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x448fe3
push 0x45cdd8
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cde0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cde8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdf0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45cdf8
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce00
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce08
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce10
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce18
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce20
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce28
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce30
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce38
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce40
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce48
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4490fa
push 0x45ce50
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0xa
push 0
lea edx, [ebp - 0x1c]
push edx
call fcn.00422660
add esp, 0xc
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00422647
mov esp, ebp
pop ebp
ret 4