Function at 0x445e8f
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48e1dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1694
call fcn.00465440
push edi
mov al, byte [0x4b02e4]
mov byte [ebp - 0x514], al
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x513]
rep stosd dword es:[edi], eax
push 0x105
lea ecx, [ebp - 0x514]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea edx, [ebp - 0x514]
push edx
call fcn.00466be0
add esp, 8
mov byte [eax], 0
mov al, byte [0x4b02e8]
mov byte [ebp - 0x1230], al
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x122f]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x514]
push ecx
push 0x4a90e4
lea edx, [ebp - 0x1230]
push edx
call fcn.004650e4
add esp, 0xc
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 0
mov al, byte [0x4b02ec]
mov byte [ebp - 0x924], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x923]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00465470
add esp, 4
test eax, eax
jne 0x445f71
xor eax, eax
jmp 0x446570
mov edx, dword [ebp + 0xc]
push edx
call fcn.00465470
add esp, 4
cmp eax, 0xc
je 0x445fda
push 0
push 0
push 0x7e
lea eax, [ebp - 0x1638]
push eax
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x165c], eax
mov ecx, dword [ebp - 0x165c]
mov dword [ebp - 0x1660], ecx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1660]
call fcn.0042e500
push eax
call fcn.004851e3
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1638]
call fcn.00480fc4
xor eax, eax
jmp 0x446570
push 4
lea edx, [ebp - 0x524]
push edx
push 3
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x4a90f4
lea eax, [ebp - 0x524]
push eax
call fcn.0046b9a0
add esp, 8
test eax, eax
je 0x446037
push str.888888888888
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0044657f
add esp, 0xc
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0
je 0x446037
mov eax, dword [ebp - 0x51c]
jmp 0x446570
mov al, byte [0x4b02f0]
mov byte [ebp - 0x40c], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x40b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x4b02f4]
mov byte [ebp - 0x1128], cl
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1127]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xd28], 0
lea edx, [ebp - 0xd24]
push edx
call fcn.00415480
add esp, 4
mov dword [ebp - 0xd28], eax
mov dword [ebp - 0x520], 0
jmp 0x4460ac
mov eax, dword [ebp - 0x520]
add eax, 1
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
cmp ecx, dword [ebp - 0xd28]
jge 0x446303
mov edx, dword [ebp - 0x520]
shl edx, 4
xor eax, eax
mov al, byte [ebp + edx - 0xd1f]
add eax, 8
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x520]
shl ecx, 4
xor edx, edx
mov dl, byte [ebp + ecx - 0xd20]
add edx, 8
and edx, 0xff
push edx
mov eax, dword [ebp - 0x520]
shl eax, 4
xor ecx, ecx
mov cl, byte [ebp + eax - 0xd21]
add ecx, 8
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x520]
shl edx, 4
xor eax, eax
mov al, byte [ebp + edx - 0xd22]
add eax, 8
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x520]
shl ecx, 4
xor edx, edx
mov dl, byte [ebp + ecx - 0xd23]
add edx, 8
and edx, 0xff
push edx
mov eax, dword [ebp - 0x520]
shl eax, 4
xor ecx, ecx
mov cl, byte [ebp + eax - 0xd24]
add ecx, 8
and ecx, 0xff
push ecx
push str._02x_02x_02x_02x_02x_02x
lea edx, [ebp - 0x40c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0044657f
add esp, 0xc
mov dword [ebp - 0x51c], eax
mov al, byte [0x4b02f8]
mov byte [ebp - 0x1630], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x162f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea ecx, [ebp - 0x40c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x1630]
push eax
call fcn.0044692d
add esp, 0xc
mov dword [ebp - 0x1634], eax
cmp dword [ebp - 0x1634], 0
je 0x4462ea
cmp dword [ebp - 0x51c], 0
je 0x446260
movsx ecx, byte [ebp - 0x1630]
cmp ecx, 0x2d
jne 0x446255
push 0x10
push 0x7e
lea edx, [ebp - 0x163c]
push edx
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x1664], eax
mov eax, dword [ebp - 0x1664]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x1668]
call fcn.0042e500
push eax
lea ecx, [ebp - 0x162f]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x163c]
call fcn.00480fc4
xor eax, eax
jmp 0x446570
mov eax, dword [ebp - 0x51c]
jmp 0x446570
movsx edx, byte [ebp - 0x1630]
cmp edx, 0x2d
jne 0x446293
push 0x400
lea eax, [ebp - 0x162f]
push eax
lea ecx, [ebp - 0x1128]
push ecx
call fcn.004669d0
add esp, 0xc
mov byte [ebp - 0xd29], 0
jmp 0x44609d
lea edx, [ebp - 0x40c]
push edx
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1630]
push ecx
call fcn.0044657f
add esp, 0xc
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0
je 0x4462e5
lea edx, [ebp - 0x1230]
push edx
lea eax, [ebp - 0x1630]
push eax
push 0x4a9124
push 0x4a912c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0x51c]
jmp 0x446570
jmp 0x44609d
cmp dword [ebp - 0x51c], 0
je 0x4462fe
mov eax, dword [ebp - 0x51c]
jmp 0x446570
jmp 0x44609d
movsx ecx, byte [ebp - 0x1128]
test ecx, ecx
je 0x446422
push 0x4a9134
lea edx, [ebp - 0x524]
push edx
call fcn.0046b9a0
add esp, 8
test eax, eax
je 0x4463c4
push 0x10
push 0x7e
lea eax, [ebp - 0x1640]
push eax
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x166c], eax
mov ecx, dword [ebp - 0x166c]
mov dword [ebp - 0x1670], ecx
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x1670]
call fcn.0042e500
push eax
push 0x7e
lea edx, [ebp - 0x1644]
push edx
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x1674], eax
mov eax, dword [ebp - 0x1674]
mov dword [ebp - 0x1678], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1678]
call fcn.0042e500
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1644]
call fcn.00480fc4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1640]
call fcn.00480fc4
jmp 0x44641d
push 0x10
push 0x7e
lea ecx, [ebp - 0x1648]
push ecx
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x167c], eax
mov edx, dword [ebp - 0x167c]
mov dword [ebp - 0x1680], edx
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x1680]
call fcn.0042e500
push eax
lea eax, [ebp - 0x1128]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1648]
call fcn.00480fc4
jmp 0x44656e
push 0x4a9138
lea ecx, [ebp - 0x524]
push ecx
call fcn.0046b9a0
add esp, 8
test eax, eax
jne 0x4464da
push 0x10
push 0x7e
lea edx, [ebp - 0x164c]
push edx
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x1684], eax
mov eax, dword [ebp - 0x1684]
mov dword [ebp - 0x1688], eax
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x1688]
call fcn.0042e500
push eax
push 0x4a913c
lea ecx, [ebp - 0x1650]
push ecx
call fcn.00411930
add esp, 8
mov dword [ebp - 0x168c], eax
mov edx, dword [ebp - 0x168c]
mov dword [ebp - 0x1690], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1690]
call fcn.0042e500
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1650]
call fcn.00480fc4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164c]
call fcn.00480fc4
jmp 0x44656e
push 0x10
push 0x7e
lea eax, [ebp - 0x1654]
push eax
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x1694], eax
mov ecx, dword [ebp - 0x1694]
mov dword [ebp - 0x1698], ecx
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x1698]
call fcn.0042e500
push eax
push 0x7e
lea edx, [ebp - 0x1658]
push edx
call fcn.00403f80
add esp, 8
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x169c]
mov dword [ebp - 0x16a0], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x16a0]
call fcn.0042e500
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1658]
call fcn.00480fc4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1654]
call fcn.00480fc4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret