Function at 0x6c7814
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x6c7de1
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x6c78d4
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.KERNEL32.DLL_GetUserDefaultLCID
mov esi, eax
call fcn.006c0498
cmp eax, 7
jle 0x6c788c
mov eax, 0x56
call fcn.0042767c
mov ebx, eax
push 0xaa
push ebx
push 0x5c
push esi
call sub.KERNEL32.DLL_GetLocaleInfoW
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
mov edx, ebx
call fcn.0040b294
mov eax, dword [ebp - 0xc]
mov ecx, 2
mov edx, 1
call fcn.0040b608
jmp 0x6c78c3
mov eax, 5
call fcn.0042767c
mov ebx, eax
push 8
push ebx
push 1
push esi
call sub.KERNEL32.DLL_GetLocaleInfoW
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
mov edx, ebx
call fcn.0040b294
mov eax, dword [ebp - 0x10]
mov ecx, 2
mov edx, 3
call fcn.0040b608
mov eax, ebx
call fcn.004276bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6c78f0
mov eax, dword [ebp - 4]
mov edx, 0x6c7e10
call fcn.0040b5d0
je 0x6c790e
mov eax, dword [ebp - 4]
mov edx, 0x6c7e24
call fcn.0040b5d0
jne 0x6c7920
mov eax, dword [ebp - 8]
mov edx, 0x6c7e38
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7e50
call fcn.0040b5d0
je 0x6c793e
mov eax, dword [ebp - 4]
mov edx, 0x6c7e64
call fcn.0040b5d0
jne 0x6c7950
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7e90
call fcn.0040b5d0
je 0x6c796e
mov eax, dword [ebp - 4]
mov edx, 0x6c7ea4
call fcn.0040b5d0
jne 0x6c7980
mov eax, dword [ebp - 8]
mov edx, 0x6c7eb8
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7ed0
call fcn.0040b5d0
je 0x6c799e
mov eax, dword [ebp - 4]
mov edx, 0x6c7ee4
call fcn.0040b5d0
jne 0x6c79b0
mov eax, dword [ebp - 8]
mov edx, 0x6c7ef8
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7f10
call fcn.0040b5d0
je 0x6c79ce
mov eax, dword [ebp - 4]
mov edx, 0x6c7f24
call fcn.0040b5d0
jne 0x6c79e0
mov eax, dword [ebp - 8]
mov edx, 0x6c7f38
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7f50
call fcn.0040b5d0
je 0x6c79fe
mov eax, dword [ebp - 4]
mov edx, 0x6c7f64
call fcn.0040b5d0
jne 0x6c7a10
mov eax, dword [ebp - 8]
mov edx, 0x6c7f78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7f90
call fcn.0040b5d0
je 0x6c7a2e
mov eax, dword [ebp - 4]
mov edx, 0x6c7fa4
call fcn.0040b5d0
jne 0x6c7a40
mov eax, dword [ebp - 8]
mov edx, 0x6c7fb8
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c7fd0
call fcn.0040b5d0
je 0x6c7a5e
mov eax, dword [ebp - 4]
mov edx, 0x6c7fe4
call fcn.0040b5d0
jne 0x6c7a70
mov eax, dword [ebp - 8]
mov edx, 0x6c7ff8
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8010
call fcn.0040b5d0
je 0x6c7a8e
mov eax, dword [ebp - 4]
mov edx, 0x6c8024
call fcn.0040b5d0
jne 0x6c7aa0
mov eax, dword [ebp - 8]
mov edx, 0x6c8038
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8050
call fcn.0040b5d0
je 0x6c7abe
mov eax, dword [ebp - 4]
mov edx, 0x6c8064
call fcn.0040b5d0
jne 0x6c7ad0
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8078
call fcn.0040b5d0
je 0x6c7aee
mov eax, dword [ebp - 4]
mov edx, 0x6c808c
call fcn.0040b5d0
jne 0x6c7b00
mov eax, dword [ebp - 8]
mov edx, 0x6c80a0
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c80b8
call fcn.0040b5d0
je 0x6c7b1e
mov eax, dword [ebp - 4]
mov edx, 0x6c80cc
call fcn.0040b5d0
jne 0x6c7b30
mov eax, dword [ebp - 8]
mov edx, 0x6c80e0
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c80f8
call fcn.0040b5d0
je 0x6c7b4e
mov eax, dword [ebp - 4]
mov edx, 0x6c810c
call fcn.0040b5d0
jne 0x6c7b60
mov eax, dword [ebp - 8]
mov edx, 0x6c8120
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8138
call fcn.0040b5d0
je 0x6c7b7e
mov eax, dword [ebp - 4]
mov edx, 0x6c814c
call fcn.0040b5d0
jne 0x6c7b90
mov eax, dword [ebp - 8]
mov edx, 0x6c8160
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8178
call fcn.0040b5d0
je 0x6c7bae
mov eax, dword [ebp - 4]
mov edx, 0x6c818c
call fcn.0040b5d0
jne 0x6c7bc0
mov eax, dword [ebp - 8]
mov edx, 0x6c81a0
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c81b8
call fcn.0040b5d0
je 0x6c7bde
mov eax, dword [ebp - 4]
mov edx, 0x6c81cc
call fcn.0040b5d0
jne 0x6c7bf0
mov eax, dword [ebp - 8]
mov edx, 0x6c81e0
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c81f8
call fcn.0040b5d0
je 0x6c7c0e
mov eax, dword [ebp - 4]
mov edx, 0x6c820c
call fcn.0040b5d0
jne 0x6c7c20
mov eax, dword [ebp - 8]
mov edx, 0x6c8220
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8238
call fcn.0040b5d0
je 0x6c7c3e
mov eax, dword [ebp - 4]
mov edx, 0x6c824c
call fcn.0040b5d0
jne 0x6c7c50
mov eax, dword [ebp - 8]
mov edx, 0x6c8260
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8278
call fcn.0040b5d0
je 0x6c7c6e
mov eax, dword [ebp - 4]
mov edx, 0x6c828c
call fcn.0040b5d0
jne 0x6c7c80
mov eax, dword [ebp - 8]
mov edx, 0x6c82a0
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8050
call fcn.0040b5d0
je 0x6c7c9e
mov eax, dword [ebp - 4]
mov edx, 0x6c82b8
call fcn.0040b5d0
jne 0x6c7cb0
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c82cc
call fcn.0040b5d0
je 0x6c7cce
mov eax, dword [ebp - 4]
mov edx, 0x6c82e0
call fcn.0040b5d0
jne 0x6c7ce0
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c82f4
call fcn.0040b5d0
je 0x6c7cfe
mov eax, dword [ebp - 4]
mov edx, 0x6c8308
call fcn.0040b5d0
jne 0x6c7d0d
mov eax, dword [ebp - 8]
mov edx, 0x6c831c
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c8334
call fcn.0040b5d0
je 0x6c7d2b
mov eax, dword [ebp - 4]
mov edx, 0x6c8348
call fcn.0040b5d0
jne 0x6c7d3a
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 4]
mov edx, 0x6c835c
call fcn.0040b5d0
je 0x6c7d58
mov eax, dword [ebp - 4]
mov edx, 0x6c8370
call fcn.0040b5d0
jne 0x6c7d67
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
jmp 0x6c7d74
mov eax, dword [ebp - 8]
mov edx, 0x6c7e78
call fcn.0040ab8c
cmp esi, 0xc04
jg 0x6c7d90
je 0x6c7da0
sub esi, 0x404
je 0x6c7da0
sub esi, 0x400
je 0x6c7daf
jmp 0x6c7dbc
sub esi, 0x1004
je 0x6c7daf
sub esi, 0x400
jne 0x6c7dbc
mov eax, dword [ebp - 8]
mov edx, 0x6c8384
call fcn.0040ab8c
jmp 0x6c7dbc
mov eax, dword [ebp - 8]
mov edx, 0x6c7ef8
call fcn.0040ab8c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6c7de8
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0040a80c
lea eax, [ebp - 4]
call fcn.0040a7ac
pop eax
jmp eax