Function at 0x413168
Capabilities:
Get geographical location

Disassembly:
push 0x9c
mov eax, 0x440d4f
call fcn.0042b30d
mov ebx, ecx
lea edi, [ebx + 0x2d8]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x8c
cdq
idiv ecx
and dword [ebp - 0x14], 0
mov dword [ebp - 0x24], edi
test eax, eax
jbe 0x4132fb
push dword [ebp - 0x14]
mov eax, edi
call fcn.00417560
mov esi, eax
mov ecx, ebx
call fcn.004134d3
test eax, eax
jl 0x41325b
mov esi, dword [ebp - 0x14]
push esi
mov eax, edi
call fcn.00417560
sub esp, 0x1c
add eax, 0x58
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call fcn.00402e94
call fcn.0040eb99
test eax, eax
jge 0x4132e1
push esi
mov eax, edi
call fcn.00417560
push eax
push ebx
call fcn.00412516
test eax, eax
jl 0x41325b
push esi
mov eax, edi
call fcn.00417560
sub esp, 0x1c
add eax, 0x58
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call fcn.00402e94
and dword [ebp - 4], 0
push esi
mov eax, edi
call fcn.00417560
sub esp, 0x1c
add eax, 0x3c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00402e94
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.00423e84
push esi
mov eax, edi
call fcn.00417560
sub esp, 0x1c
add eax, 0x58
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00402e94
push ebx
call fcn.0040de4a
test eax, eax
jge 0x4132e1
lea eax, [ebp - 0x28]
push eax
push ecx
push dword [ebp - 0x14]
mov eax, edi
call fcn.00417560
pop ecx
push eax
mov ecx, ebx
call fcn.00411f1c
test eax, eax
jge 0x413303
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x1c], esp
push 0x3b
push 0x4488d8
call fcn.0040801d
lea edi, [ebp - 0xa8]
call fcn.00426ea5
xor esi, esi
inc esi
mov dword [ebp - 4], esi
call fcn.0042700a
mov byte [ebp - 4], 2
cmp dword [eax + 0x18], 0x10
jb 0x4132b8
mov eax, dword [eax + 4]
jmp 0x4132bb
add eax, 4
push eax
push esi
call fcn.0040e8e1
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040329c
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xa8]
call fcn.00417161
mov edi, dword [ebp - 0x24]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
mov ecx, 0x8c
cdq
idiv ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jb 0x41319c
xor eax, eax
call fcn.0042b3e5
ret
push dword [ebp - 0x14]
mov eax, edi
call fcn.00417560
sub esp, 0x1c
add eax, 0x58
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00402e94
push dword [ebp - 0x28]
push ebx
call fcn.00423f3a
push dword [ebp - 0x14]
and dword [ebp - 0x20], 0
mov eax, edi
call fcn.00417560
add eax, 4
cmp dword [eax + 0x18], 0x10
jb 0x413343
mov esi, dword [eax + 4]
jmp 0x413346
lea esi, [eax + 4]
push dword [ebp - 0x14]
mov eax, edi
call fcn.00417560
lea ecx, [ebp - 0x20]
push ecx
push 0xf003f
push 0
push esi
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0
mov esi, eax
call fcn.0042a13f
pop ecx
test esi, esi
je 0x41342e
push esi
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x1c], esp
push 0x2f
push 0x448914
call fcn.0040801d
lea edi, [ebp - 0xa8]
call fcn.00426ea5
mov dword [ebp - 4], 3
call fcn.00426f82
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 0x10
jb 0x4133b5
mov eax, dword [eax + 4]
jmp 0x4133b8
add eax, 4
push eax
push 1
call fcn.0040e8e1
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.0040329c
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xa8]
call fcn.00417161
lea eax, [ebp - 0x15]
mov byte [ebp - 0x15], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4133e8
sub eax, ecx
push 0
pop eax
setne al
dec eax
jne 0x4132de
push 4
lea eax, [ebp - 0x30]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x50]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
call fcn.0040baef
jmp 0x4132de
push dword [ebp - 0x14]
mov esi, dword [ebp - 0x20]
mov eax, edi
call fcn.00417560
cmp dword [eax + 0x88], 0
je 0x413450
push esi
mov esi, eax
call fcn.004124b2
test eax, eax
jge 0x4134bb
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x1c], esp
push 0x3a
push 0x448944
call fcn.0040801d
lea edi, [ebp - 0xa8]
call fcn.00426ea5
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.00427269
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 0x10
jb 0x413490
mov eax, dword [eax + 4]
jmp 0x413493
add eax, 4
push eax
push 1
call fcn.0040e8e1
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.0040329c
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0xa8]
call fcn.00417161
mov edi, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0
je 0x4132e1
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4132e1