Function at 0x4392c4
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x4b8f40]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ecx, ecx
mov eax, 0x4d3fa4
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push eax
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], ecx
mov dword [ebp - 0x22c], ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x230]
call fcn.004346a1
test byte [esi + 0x20], 2
jne 0x439608
push edi
mov edi, 0x4d3fbc
cmp dword [esi + 0x14], ebx
je 0x43933a
push dword [esi + 0x14]
mov ecx, edi
call fcn.0043f63a
and dword [esi + 0x14], ebx
mov byte [esi + 0x1d], bl
push 0x100
lea eax, [ebp - 0x214]
push eax
push 0x6c
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
push 4
pop ecx
cmp eax, ecx
jle 0x43944b
xor edi, edi
test eax, eax
push 5
cmovns edi, eax
xor edx, edx
pop ecx
mov eax, edi
mov dword [ebp - 0x220], edi
div ecx
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov ecx, 0x4d3fbc
call fcn.0043f5f4
mov dword [esi + 0x14], eax
test eax, eax
je 0x43956f
push 4
pop eax
cmp edi, eax
jbe 0x43942e
mov ecx, dword [ebp - 0x220]
lea edi, [ebp - 0x20c]
push 8
mov dword [ebp - 0x224], eax
pop ebx
push 0x3b
pop edx
cmp dx, word [edi]
jne 0x439415
cmp ebx, 0x200
jae 0x43962d
xor eax, eax
mov word [edi], ax
lea eax, [ebp - 0x21c]
push eax
lea eax, [edi - 8]
push eax
call fcn.0043c037
mov dword [ebp - 0x218], eax
test eax, eax
js 0x4393fe
movzx edx, byte [esi + 0x1d]
mov ecx, dword [esi + 0x14]
mov eax, dword [ebp - 0x21c]
mov dword [ecx + edx*4], eax
inc byte [esi + 0x1d]
jmp 0x439409
cmp eax, 0x8007000e
je 0x4394c3
mov ecx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x224]
add eax, 5
add edi, 0xa
add ebx, 0xa
mov dword [ebp - 0x224], eax
cmp eax, ecx
jb 0x4393b6
mov ebx, dword [ebp - 0x228]
cmp byte [esi + 0x1d], 0
ja 0x4395e3
push dword [esi + 0x14]
mov edi, 0x4d3fbc
mov ecx, edi
call fcn.0043f63a
and dword [esi + 0x14], 0
push 8
lea eax, [ebp - 0x14]
push eax
push 0x1004
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
je 0x43955d
lea eax, [ebp - 0x24c]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
push str.CpgScript
push 0
call fcn.0043c5e8
mov dword [ebp - 0x218], eax
test eax, eax
js 0x43955d
mov eax, dword [ebp - 0x248]
xor ecx, ecx
push 4
xor ebx, ebx
pop edx
inc ebx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov ecx, edi
call fcn.0043f5f4
mov dword [esi + 0x14], eax
test eax, eax
jne 0x4394dd
mov dword [ebp - 0x218], 0x8007000e
jmp 0x4395fb
push dword [esi + 0x14]
mov ecx, 0x4d3fbc
call fcn.0043f63a
and dword [esi + 0x14], 0
mov byte [esi + 0x1d], 0
jmp 0x439607
xor edi, edi
cmp dword [ebp - 0x248], edi
jbe 0x43952b
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x24c]
push dword [eax + edi*4]
call fcn.0043c037
mov dword [ebp - 0x218], eax
test eax, eax
js 0x43951b
movzx edx, byte [esi + 0x1d]
mov ecx, dword [esi + 0x14]
mov eax, dword [ebp - 0x21c]
mov dword [ecx + edx*4], eax
inc byte [esi + 0x1d]
jmp 0x439522
cmp eax, 0x8007000e
je 0x439543
inc edi
cmp edi, dword [ebp - 0x248]
jb 0x4394e7
cmp byte [esi + 0x1d], 0
jne 0x4395e3
mov eax, dword [esi + 0x14]
mov byte [esi + 0x1d], bl
and dword [eax], 0
jmp 0x4395e3
push dword [esi + 0x14]
mov ecx, 0x4d3fbc
call fcn.0043f63a
and dword [esi + 0x14], 0
mov byte [esi + 0x1d], 0
jmp 0x4395fb
push 4
pop edx
push edx
mov ecx, edi
call fcn.0043f5f4
mov dword [esi + 0x14], eax
test eax, eax
jne 0x43957e
mov dword [ebp - 0x218], 0x8007000e
jmp 0x439607
push 0x100
mov byte [esi + 0x1d], 1
and dword [eax], 0
lea eax, [ebp - 0x214]
push eax
push 4
pop eax
push eax
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
je 0x4395e3
and dword [ebp - 0x21c], 0
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.0043b35f
test eax, eax
je 0x4395d7
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x21c]
call fcn.0043e4eb
mov ecx, dword [esi + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x218], 0x8007000e
je 0x439607
cmp dword [esi + 8], 0xc00
je 0x4395f0
or dword [esi + 0x20], 2
and dword [ebp - 0x218], 0
test ebx, ebx
je 0x439607
lea eax, [ebp - 0x24c]
push eax
call fcn.0043c7af
pop edi
mov esi, dword [ebp - 0x218]
lea ecx, [ebp - 0x234]
call fcn.0043379c
mov ecx, dword [ebp - 4]
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044d772
mov esp, ebp
pop ebp
ret 4
call fcn.0044dbcc
int3