Function at 0x41cf8a
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
mov eax, dword [0x46a264]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
xor ebx, ebx
cmp eax, 0xffffffff
je 0x41cfe9
push ebx
xor ecx, ecx
mov dword [ebp - 0xa], ebx
push 3
mov word [ebp - 0xc], cx
lea ecx, [ebp - 0xc]
push ecx
push 4
push eax
call dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
cmp eax, 3
jne 0x41cfe9
lea eax, [ebp - 0x8d]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x40]
call fcn.0041cb5e
jmp 0x41cff6
mov byte [ebp - 0x40], bl
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
push 7
xor eax, eax
mov dword [ebp - 0x18], ebx
pop esi
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], esi
push eax
push str.User_region:
mov byte [ebp - 0x10], bl
call fcn.00412aa6
mov ecx, eax
call fcn.00416051
lea eax, [ebp - 0x28]
push eax
push eax
push 0x50
push str._anonymous_namespace::AutodetectBrandName
push ebx
call fcn.00424aa4
add esp, 0x14
lea ecx, [ebp - 0x28]
push ebx
push 1
call fcn.00401e60
lea eax, [ebp - 0x8c]
push eax
call fcn.0041ade2
xor eax, eax
mov dword [ebp - 0x14], esi
pop ecx
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x18], ebx
push eax
push str.User_locale:
mov byte [ebp - 0x10], bl
call fcn.00412aa6
mov ecx, eax
call fcn.00416051
lea eax, [ebp - 0x28]
push eax
push eax
push 0x52
push str._anonymous_namespace::AutodetectBrandName
push ebx
call fcn.00424aa4
add esp, 0x14
lea ecx, [ebp - 0x28]
push ebx
push 1
call fcn.00401e60
mov dword [ebp - 0xc], ebx
mov esi, ebx
push dword [esi + 0x456420]
lea ecx, [ebp - 0x74]
call fcn.00401dc0
cmp dword [ebp - 0x64], 0
je 0x41d0c0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b670
test eax, eax
jne 0x41d0fa
push dword [esi + 0x456424]
lea ecx, [ebp - 0x24]
call fcn.00401dc0
cmp dword [ebp - 0x14], 0
je 0x41d17b
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x24]
call fcn.0040b670
test eax, eax
je 0x41d17b
push ebx
push 1
lea ecx, [ebp - 0x24]
call fcn.00401eb0
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.00401eb0
inc dword [ebp - 0xc]
add esi, 0xc
cmp esi, 0x60
jb 0x41d09c
mov esi, str.yandex
mov dword [ebp - 0x14], 7
push esi
xor eax, eax
mov dword [ebp - 0x18], ebx
push str.Didnt_found_brand_name._Use_default:
lea ecx, [ebp - 0x28]
mov word [ebp - 0x28], ax
mov byte [ebp - 0x10], bl
call fcn.00412aa6
mov ecx, eax
call fcn.00412aa6
lea eax, [ebp - 0x28]
push eax
push eax
push 0x64
push str._anonymous_namespace::AutodetectBrandName
push ebx
call fcn.00424aa4
add esp, 0x14
lea ecx, [ebp - 0x28]
push ebx
push 1
call fcn.00401e60
push esi
mov ecx, edi
call fcn.00401dc0
push ebx
push 1
lea ecx, [ebp - 0x8c]
call fcn.00401eb0
push ebx
push 1
jmp 0x41d1ff
imul esi, dword [ebp - 0xc], 0xc
lea ecx, [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], ebx
mov word [ebp - 0x5c], ax
mov byte [ebp - 0x44], bl
push dword [esi + 0x456428]
push str.Detected_brand_name:
call fcn.00412aa6
mov ecx, eax
call fcn.00412aa6
lea eax, [ebp - 0x5c]
push eax
push eax
push 0x60
push str._anonymous_namespace::AutodetectBrandName
push ebx
call fcn.00424aa4
add esp, 0x14
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.00401e60
push dword [esi + 0x456428]
mov ecx, edi
call fcn.00401dc0
xor esi, esi
lea ecx, [ebp - 0x24]
push ebx
inc esi
push esi
call fcn.00401eb0
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.00401eb0
push ebx
push esi
lea ecx, [ebp - 0x8c]
call fcn.00401eb0
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.00401eb0
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042d2b3
mov esp, ebp
pop ebp
ret