Function at 0x4a9a60
Capabilities:
Get file size
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x527759
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x559024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
mov ebx, ecx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov ecx, 1
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], edi
cmp eax, edi
je 0x4a9c6a
push edi
push 0x80
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4a9c6a
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2c]
xor edx, edx
xor ecx, ecx
add ecx, edi
adc eax, edx
mov esi, ecx
add esi, 0xffffffff
mov edx, eax
adc edx, 0xffffffff
test edx, edx
ja 0x4a9b2a
jb 0x4a9b18
cmp esi, 0x3fe
ja 0x4a9b2a
push 0x53863c
lea eax, [ebp - 0x28]
call fcn.004fcf00
jmp 0x4a9c68
mov esi, ecx
shrd ecx, eax, 0xa
shr eax, 0xa
mov ebx, eax
and esi, 0x3ff
mov edi, ecx
test ebx, ebx
ja 0x4a9b52
jb 0x4a9b4b
cmp edi, 0x400
jae 0x4a9b52
push 0x53fecc
jmp 0x4a9b8a
mov esi, edi
shrd edi, ebx, 0xa
shr ebx, 0xa
and esi, 0x3ff
test ebx, ebx
ja 0x4a9b76
jb 0x4a9b6f
cmp edi, 0x400
jae 0x4a9b76
push 0x53fed4
jmp 0x4a9b8a
mov esi, edi
shrd edi, ebx, 0xa
and esi, 0x3ff
shr ebx, 0xa
push 0x53fedc
lea eax, [ebp - 0x28]
call fcn.004fcf00
imul esi, esi, 0x3e8
shr esi, 0xa
mov eax, 0x51eb851f
mul esi
shr edx, 5
imul edx, edx, 0x64
mov eax, esi
sub eax, edx
cmp eax, 0x32
jbe 0x4a9bc6
cmp esi, 0x3b6
jae 0x4a9bbe
add esi, 0x32
jmp 0x4a9bc6
add edi, 1
adc ebx, 0
xor esi, esi
mov eax, 0x51eb851f
mul esi
xor eax, eax
mov esi, edx
shr esi, 5
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
push edi
lea ecx, [ebp - 0x3c]
push 0x53a758
push ecx
mov byte [ebp - 4], 2
call fcn.004fc310
add esp, 0xc
cmp dword [ebp - 0x38], 1
jne 0x4a9c32
push 3
lea edx, [ebp - 0x18]
push edx
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4a9c18
mov eax, 0x538640
mov ecx, dword [ebp - 0x1c]
push eax
push esi
lea eax, [ebp - 0x18]
push eax
push edi
push str._d_s_d_s
push ecx
call fcn.004fc310
add esp, 0x18
jmp 0x4a9c51
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4a9c3e
mov eax, 0x538640
mov edx, dword [ebp - 0x1c]
push eax
push edi
push str._d_s
push edx
call fcn.004fc310
add esp, 0x10
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x4a9c65
push eax
call fcn.005134a7
add esp, 4
mov ebx, dword [ebp - 0x1c]
xor edi, edi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28]
cmp eax, edi
je 0x4a9c7e
push eax
call fcn.005134a7
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00513498
mov esp, ebp
pop ebp
ret 4