Function at 0x41e15f
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x4e8c31
call fcn.004b48a0
sub esp, 0x34
mov eax, dword [0x51cfb4]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x41e42f
push esi
push edi
xor eax, eax
mov dword [ebp - 0x40], 0x363339
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x18
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push 0xb
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
or esi, 0xffffffff
push esi
push esi
push 0x4f004f
mov ecx, 0x51cfb4
call fcn.00449560
push 0x105
lea ecx, [ebp - 0x10]
mov dword [0x51cfb8], ebx
call fcn.004494b0
mov eax, dword [ebp - 0x10]
push 0x104
push eax
mov word [eax], bx
push dword [0x51d1cc]
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push 0x4f4400
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.004565c0
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.00449510
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00443880
push esi
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x18]
call fcn.004565c0
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.00449510
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00443880
push esi
mov esi, str..lang
push esi
lea ecx, [ebp - 0x18]
call fcn.004565c0
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.00449510
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00443880
lea ecx, [ebp - 0x28]
call fcn.00449290
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 4
push ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call fcn.00424169
add esp, 0xc
cmp eax, 0xfffffffe
jne 0x41e2c7
mov eax, dword [ebp - 0x10]
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x1c]
mov word [eax + edi*2], bx
call fcn.004565c0
push dword [eax]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.00449510
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.00443880
push ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call fcn.00424169
add esp, 0xc
cmp eax, 1
jge 0x41e2d3
xor esi, esi
jmp 0x41e414
mov edi, dword [ebp - 0x28]
shr dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x24]
push 6
push edi
push 0x4f43f0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], edi
call fcn.004449d0
add esp, 0xc
test al, al
je 0x41e32e
lea eax, [ebp - 0x14]
call fcn.00417e09
mov edi, dword [ebp - 0x14]
cmp edi, ebx
je 0x41e32e
xor eax, eax
mov ax, word [edi]
push eax
call fcn.0041ed98
add esp, 4
test al, al
je 0x41e32e
inc edi
xor eax, eax
inc edi
mov ax, word [edi]
push eax
call fcn.0041ed98
add esp, 4
test al, al
jne 0x41e317
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov esi, edi
jmp 0x41e3ea
push 5
push edi
push str.str:
call fcn.004449d0
add esp, 0xc
test al, al
je 0x41e3f3
lea eax, [ebp - 0x14]
call fcn.00417e09
lea eax, [edi + 0xa]
mov cx, word [eax]
cmp cx, 0x30
mov edi, dword [ebp - 0x14]
jb 0x41e3be
cmp cx, 0x39
ja 0x41e3be
jmp 0x41e3b5
mov cx, word [eax]
cmp cx, 0x5c
jne 0x41e3ae
lea ecx, [eax + 2]
mov dx, word [ecx]
cmp dx, 0x72
jne 0x41e390
mov word [esi], 0xd
inc esi
inc esi
add eax, 4
jmp 0x41e3b5
cmp dx, 0x6e
jne 0x41e39d
mov word [esi], 0xa
jmp 0x41e389
mov word [esi], 0x5c
inc esi
inc esi
cmp dx, 0x5c
je 0x41e38b
mov eax, ecx
jmp 0x41e3b5
mov word [esi], cx
inc esi
inc esi
inc eax
inc eax
cmp eax, edi
jb 0x41e36f
mov word [esi], bx
inc esi
inc esi
xor eax, eax
mov ax, word [edi]
push eax
call fcn.0041ed98
add esp, 4
test al, al
je 0x41e3ea
mov word [edi], bx
inc edi
xor eax, eax
inc edi
mov ax, word [edi]
push eax
call fcn.0041ed98
add esp, 4
test al, al
jne 0x41e3d0
mov dword [ebp - 0x14], edi
cmp word [edi], bx
jne 0x41e338
sub esi, dword [ebp - 0x18]
mov ecx, 0x51cfb4
sar esi, 1
push esi
push dword [ebp - 0x18]
call fcn.00449600
lea eax, [esi + esi]
mov esi, dword [0x51cfb4]
mov dword [0x51cfb8], eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00443880
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00443880
pop edi
mov eax, esi
pop esi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret